ryco-cli 0.1.29 → 0.1.31

package/dist/{Metrics-Bf96NJ4j.cjs → Metrics-DjRPLE98.cjs}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 
-const require_rolldown_runtime = require("./rolldown-runtime-LGfotAqq.cjs");
-const require_src = require("./src-BzVJd3Me.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-HbSU0i7K.cjs");
+const require_src = require("./src-FmeCeBJ9.cjs");
 const require_schemaJson = require("./schemaJson-CuhFxa8p.cjs");
 const require_processRunner = require("./processRunner-BP9l9eOt.cjs");
 let effect = require("effect");
-let effect_Predicate = require("effect/Predicate");
-effect_Predicate = require_rolldown_runtime.__toESM(effect_Predicate, 1);
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let node_crypto = require("node:crypto");
 node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
+let effect_Predicate = require("effect/Predicate");
+effect_Predicate = require_rolldown_runtime.__toESM(effect_Predicate, 1);
 let node_fs = require("node:fs");
 let node_os = require("node:os");
 let node_fs_promises = require("node:fs/promises");
@@ -19,763 +19,628 @@ let effect_Semaphore = require("effect/Semaphore");
 effect_Semaphore = require_rolldown_runtime.__toESM(effect_Semaphore, 1);
 require("effect/PlatformError");
 let effect_Function = require("effect/Function");
-//#region ../../packages/shared/src/Struct.ts
-function deepMerge(current, patch) {
-	if (!effect_Predicate.isObject(current) || !effect_Predicate.isObject(patch)) return patch;
-	const next = { ...current };
-	for (const [key, value] of Object.entries(patch)) {
-		if (value === void 0) continue;
-		const existing = next[key];
-		next[key] = effect_Predicate.isObject(existing) && effect_Predicate.isObject(value) ? deepMerge(existing, value) : value;
-	}
-	return next;
-}
-//#endregion
-//#region ../../packages/shared/src/model.ts
-const DEFAULT_PROVIDER_DRIVER_KIND = require_src.ProviderDriverKind.make("codex");
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/is.js
+const objectTypeNames = [
+	"Object",
+	"RegExp",
+	"Date",
+	"Error",
+	"Map",
+	"Set",
+	"WeakMap",
+	"WeakSet",
+	"ArrayBuffer",
+	"SharedArrayBuffer",
+	"DataView",
+	"Promise",
+	"URL",
+	"HTMLElement",
+	"Int8Array",
+	"Uint8ClampedArray",
+	"Int16Array",
+	"Uint16Array",
+	"Int32Array",
+	"Uint32Array",
+	"Float32Array",
+	"Float64Array",
+	"BigInt64Array",
+	"BigUint64Array",
+	"Tagged"
+];
 /**
-* Resolve the human-readable model title used by picker surfaces and durable
-* handoff presentation. Provider catalogs are authoritative when they carry a
-* friendly name; the routing slug remains the deterministic final fallback.
+* @param {any} value
+* @returns {string}
 */
-function getModelDisplayName(model, options) {
-	const shortName = trimOrNull(model.shortName);
-	const name = trimOrNull(model.name);
-	const slug = trimOrNull(model.slug) ?? model.slug;
-	return options?.preferShortName ? shortName ?? name ?? slug : name ?? shortName ?? slug;
-}
-/** Compose the optional sub-provider prefix exactly as the picker trigger does. */
-function getModelDisplayLabel(model, options) {
-	const title = getModelDisplayName(model, options);
-	const subProvider = trimOrNull(model.subProvider);
-	return subProvider ? `${subProvider} · ${title}` : title;
-}
-function createModelCapabilities(input) {
-	return { optionDescriptors: input.optionDescriptors.map(cloneDescriptor) };
-}
-function getRawSelectionValueById(selections, id) {
-	return (selections?.find((candidate) => candidate.id === id))?.value;
-}
-function getProviderOptionSelectionValue(selections, id) {
-	return getRawSelectionValueById(selections, id);
-}
-function getProviderOptionStringSelectionValue(selections, id) {
-	const value = getProviderOptionSelectionValue(selections, id);
-	return typeof value === "string" ? value : void 0;
-}
-function getProviderOptionBooleanSelectionValue(selections, id) {
-	const value = getProviderOptionSelectionValue(selections, id);
-	return typeof value === "boolean" ? value : void 0;
-}
-function getModelSelectionStringOptionValue(modelSelection, id) {
-	return getProviderOptionStringSelectionValue(modelSelection?.options, id);
-}
-function getModelSelectionBooleanOptionValue(modelSelection, id) {
-	return getProviderOptionBooleanSelectionValue(modelSelection?.options, id);
-}
-function resolveDescriptorChoiceValue(descriptor, raw) {
-	const trimmed = trimOrNull(raw);
-	if (!trimmed) return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
-	if (descriptor.options.length === 0) return trimmed;
-	if (descriptor.promptInjectedValues?.includes(trimmed) && descriptor.options.some((option) => option.id === trimmed)) return descriptor.options.find((option) => option.isDefault)?.id;
-	if (descriptor.options.some((option) => option.id === trimmed)) return trimmed;
-	return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
-}
-function cloneDescriptor(descriptor) {
-	return descriptor.type === "select" ? {
-		...descriptor,
-		options: [...descriptor.options],
-		...descriptor.promptInjectedValues ? { promptInjectedValues: [...descriptor.promptInjectedValues] } : {}
-	} : { ...descriptor };
+function is(value) {
+	if (value === null) return "null";
+	if (value === void 0) return "undefined";
+	if (value === true || value === false) return "boolean";
+	const typeOf = typeof value;
+	if (typeOf === "string" || typeOf === "number" || typeOf === "bigint" || typeOf === "symbol") return typeOf;
+	if (typeOf === "function") return "Function";
+	if (Array.isArray(value)) return "Array";
+	if (value instanceof Uint8Array) return "Uint8Array";
+	if (value.constructor === Object) return "Object";
+	const objectType = getObjectType(value);
+	if (objectType) return objectType;
+	return "Object";
 }
-function cloneSelection(selection) {
-	return { ...selection };
+/**
+* @param {any} value
+* @returns {string|undefined}
+*/
+function getObjectType(value) {
+	const objectTypeName = Object.prototype.toString.call(value).slice(8, -1);
+	if (objectTypeNames.includes(objectTypeName)) return objectTypeName;
 }
-function withDescriptorCurrentValue(descriptor, rawCurrentValue) {
-	if (descriptor.type === "boolean") {
-		if (typeof rawCurrentValue === "boolean") return {
-			...descriptor,
-			currentValue: rawCurrentValue
-		};
-		return descriptor;
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/token.js
+var Type = class {
+	/**
+	* @param {number} major
+	* @param {string} name
+	* @param {boolean} terminal
+	*/
+	constructor(major, name, terminal) {
+		this.major = major;
+		this.majorEncoded = major << 5;
+		this.name = name;
+		this.terminal = terminal;
 	}
-	const currentValue = typeof rawCurrentValue === "string" ? resolveDescriptorChoiceValue(descriptor, rawCurrentValue) : resolveDescriptorChoiceValue(descriptor, descriptor.currentValue);
-	if (!currentValue) {
-		const { currentValue: _unusedCurrentValue, ...rest } = descriptor;
-		return rest;
+	toString() {
+		return `Type[${this.major}].${this.name}`;
 	}
-	return {
-		...descriptor,
-		currentValue
-	};
-}
-function getProviderOptionDescriptors(input) {
-	const { caps, selections } = input;
-	return (caps.optionDescriptors ?? []).map(cloneDescriptor).map((descriptor) => withDescriptorCurrentValue(descriptor, getRawSelectionValueById(selections, descriptor.id) ?? descriptor.currentValue));
-}
-function getProviderOptionCurrentValue(descriptor) {
-	if (!descriptor) return;
-	if (descriptor.type === "boolean") return descriptor.currentValue;
-	if (descriptor.currentValue) return descriptor.currentValue;
-	return descriptor.options.find((option) => option.isDefault)?.id;
-}
-function normalizeModelSlug(model, provider = DEFAULT_PROVIDER_DRIVER_KIND) {
-	if (typeof model !== "string") return null;
-	const trimmed = model.trim();
-	if (!trimmed) return null;
-	const aliases = require_src.MODEL_SLUG_ALIASES_BY_PROVIDER[provider] ?? {};
-	const aliased = Object.prototype.hasOwnProperty.call(aliases, trimmed) ? aliases[trimmed] : void 0;
-	return typeof aliased === "string" ? aliased : trimmed;
-}
-/** Trim a string, returning null for empty/missing values. */
-function trimOrNull(value) {
-	if (typeof value !== "string") return null;
-	return value.trim() || null;
-}
-function cloneSelections(selections) {
-	return selections.map(cloneSelection);
-}
-function createModelSelection(instanceId, model, options) {
-	const selections = options ? cloneSelections(options) : [];
-	const base = {
-		instanceId,
-		model
-	};
-	return selections.length > 0 ? {
-		...base,
-		options: selections
-	} : base;
-}
+	/**
+	* @param {Type} typ
+	* @returns {number}
+	*/
+	compare(typ) {
+		return this.major < typ.major ? -1 : this.major > typ.major ? 1 : 0;
+	}
+	/**
+	* Check equality between two Type instances. Safe to use across different
+	* copies of the Type class (e.g., when bundlers duplicate the module).
+	* (major, name) uniquely identifies a Type; terminal is implied by these.
+	* @param {Type} a
+	* @param {Type} b
+	* @returns {boolean}
+	*/
+	static equals(a, b) {
+		return a === b || a.major === b.major && a.name === b.name;
+	}
+};
+Type.uint = new Type(0, "uint", true);
+Type.negint = new Type(1, "negint", true);
+Type.bytes = new Type(2, "bytes", true);
+Type.string = new Type(3, "string", true);
+Type.array = new Type(4, "array", false);
+Type.map = new Type(5, "map", false);
+Type.tag = new Type(6, "tag", false);
+Type.float = new Type(7, "float", true);
+Type.false = new Type(7, "false", true);
+Type.true = new Type(7, "true", true);
+Type.null = new Type(7, "null", true);
+Type.undefined = new Type(7, "undefined", true);
+Type.break = new Type(7, "break", true);
+var Token = class {
+	/**
+	* @param {Type} type
+	* @param {any} [value]
+	* @param {number} [encodedLength]
+	*/
+	constructor(type, value, encodedLength) {
+		this.type = type;
+		this.value = value;
+		this.encodedLength = encodedLength;
+		/** @type {Uint8Array|undefined} */
+		this.encodedBytes = void 0;
+		/** @type {Uint8Array|undefined} */
+		this.byteValue = void 0;
+	}
+	toString() {
+		return `Token[${this.type}].${this.value}`;
+	}
+};
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/byte-utils.js
+const useBuffer = globalThis.process && !globalThis.process.browser && globalThis.Buffer && typeof globalThis.Buffer.isBuffer === "function";
+const textEncoder$1 = new TextEncoder();
 /**
-* Context handoff is a provider-instance boundary. Model and option changes
-* within one configured instance remain on that provider's normal turn path.
+* @typedef {import('../interface.js').ByteView} ByteView
+* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
 */
-function modelSelectionRequiresContextHandoff(input) {
-	return input.canonicalSelection.instanceId !== input.targetSelection.instanceId;
-}
 /**
-* Returns the effort value if it is a prompt-injected value according to
-* any select descriptor in the given capabilities, or null otherwise.
-*
-* Unlike a single `find`, this checks every descriptor so that the
-* correct descriptor's `promptInjectedValues` list is consulted even when
-* multiple select descriptors exist.
+* @param {Uint8Array} buf
+* @returns {boolean}
 */
-function resolvePromptInjectedEffort(caps, rawEffort) {
-	const trimmed = trimOrNull(rawEffort);
-	if (!trimmed) return null;
-	const descriptors = getProviderOptionDescriptors({ caps });
-	for (const descriptor of descriptors) if (descriptor.type === "select" && descriptor.promptInjectedValues?.includes(trimmed)) return trimmed;
-	return null;
-}
-function applyClaudePromptEffortPrefix(text, effort) {
-	const trimmed = text.trim();
-	if (!trimmed) return trimmed;
-	if (effort !== "ultrathink") return trimmed;
-	if (trimmed.startsWith("Ultrathink:")) return trimmed;
-	return `Ultrathink:\n${trimmed}`;
-}
-//#endregion
-//#region ../../packages/shared/src/serverSettings.ts
-const ServerSettingsJson$1 = require_schemaJson.fromLenientJson(require_src.ServerSettings);
-function normalizePersistedServerSettingString(value) {
-	const trimmed = value?.trim();
-	return trimmed && trimmed.length > 0 ? trimmed : void 0;
+function isBuffer(buf) {
+	return useBuffer && globalThis.Buffer.isBuffer(buf);
 }
-function extractPersistedServerObservabilitySettings(input) {
-	return {
-		otlpTracesUrl: normalizePersistedServerSettingString(input.observability?.otlpTracesUrl),
-		otlpMetricsUrl: normalizePersistedServerSettingString(input.observability?.otlpMetricsUrl)
-	};
+/**
+* @param {ByteView|number[]} buf
+* @returns {ByteView}
+*/
+function asU8A(buf) {
+	if (!(buf instanceof Uint8Array)) return Uint8Array.from(buf);
+	return isBuffer(buf) ? new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength) : buf;
 }
-function parsePersistedServerObservabilitySettings(raw) {
-	try {
-		return extractPersistedServerObservabilitySettings(effect.Schema.decodeUnknownSync(ServerSettingsJson$1)(raw));
-	} catch {
-		return {
-			otlpTracesUrl: void 0,
-			otlpMetricsUrl: void 0
-		};
+const FROM_STRING_THRESHOLD_BUFFER = 24;
+const FROM_STRING_THRESHOLD_TEXTENCODER = 200;
+const fromString = useBuffer ? (string) => {
+	return string.length >= FROM_STRING_THRESHOLD_BUFFER ? globalThis.Buffer.from(string) : utf8ToBytes(string);
+} : 
+/**
+* @param {string} string
+*/
+(string) => {
+	return string.length >= FROM_STRING_THRESHOLD_TEXTENCODER ? textEncoder$1.encode(string) : utf8ToBytes(string);
+};
+/**
+* Buffer variant not fast enough for what we need
+* @param {number[]} arr
+* @returns {AllocatedByteView}
+*/
+const fromArray = (arr) => {
+	return Uint8Array.from(arr);
+};
+const slice = useBuffer ? (bytes, start, end) => {
+	if (isBuffer(bytes)) return new Uint8Array(bytes.subarray(start, end));
+	return bytes.slice(start, end);
+} : 
+/**
+* @param {Uint8Array} bytes
+* @param {number} start
+* @param {number} end
+*/
+(bytes, start, end) => {
+	return bytes.slice(start, end);
+};
+const concat = useBuffer ? (chunks, length) => {
+	chunks = chunks.map((c) => c instanceof Uint8Array ? c : globalThis.Buffer.from(c));
+	return asU8A(globalThis.Buffer.concat(chunks, length));
+} : 
+/**
+* @param {ByteView[]} chunks
+* @param {number} length
+* @returns {AllocatedByteView}
+*/
+(chunks, length) => {
+	const out = new Uint8Array(length);
+	let off = 0;
+	for (let b of chunks) {
+		if (off + b.length > out.length) b = b.subarray(0, out.length - off);
+		out.set(b, off);
+		off += b.length;
 	}
-}
-function shouldReplaceTextGenerationModelSelection(patch) {
-	return Boolean(patch && (patch.instanceId !== void 0 || patch.model !== void 0));
-}
-function mergeModelSelectionOptionsById(input) {
-	if (input.patch === void 0) return input.current ? [...input.current] : void 0;
-	if (input.patch.length === 0) return;
-	const merged = new Map((input.current ?? []).map((selection) => [selection.id, selection.value]));
-	for (const selection of input.patch) merged.set(selection.id, selection.value);
-	return [...merged.entries()].map(([id, value]) => ({
-		id,
-		value
-	}));
+	return out;
+};
+const alloc = useBuffer ? (size) => {
+	return globalThis.Buffer.allocUnsafe(size);
+} : 
+/**
+* @param {number} size
+* @returns {AllocatedByteView}
+*/
+(size) => {
+	return new Uint8Array(size);
+};
+/**
+* @param {Uint8Array} b1
+* @param {Uint8Array} b2
+* @returns {number}
+*/
+function compare(b1, b2) {
+	if (isBuffer(b1) && isBuffer(b2)) return b1.compare(b2);
+	for (let i = 0; i < b1.length; i++) {
+		if (b1[i] === b2[i]) continue;
+		return b1[i] < b2[i] ? -1 : 1;
+	}
+	return 0;
 }
 /**
-* Applies a server settings patch while treating textGenerationModelSelection as
-* replace-on-provider/model updates. This prevents stale nested options from
-* surviving a reset patch that intentionally omits options.
+* @param {string} str
+* @returns {number[]}
 */
-function applyServerSettingsPatch(current, patch) {
-	const selectionPatch = patch.textGenerationModelSelection;
-	for (const [field, value] of Object.entries(patch.expectedNodePreferences ?? {})) if (!effect.Equal.equals(current[field] ?? null, value)) throw new Error("Node preferences changed elsewhere. Reload before saving.");
-	for (const [projectId, expected] of Object.entries(patch.expectedProjectPreferences ?? {})) {
-		const currentPreferences = current.projectPreferences[projectId] ?? {};
-		for (const [field, value] of Object.entries(expected)) {
-			const actual = field === "initialModelSelection" && !Object.hasOwn(currentPreferences, field) ? "absent" : currentPreferences[field] ?? null;
-			if (!effect.Equal.equals(actual, value)) throw new Error("Project preferences changed elsewhere. Reload before saving.");
+function utf8ToBytes(str) {
+	const out = [];
+	let p = 0;
+	for (let i = 0; i < str.length; i++) {
+		let c = str.charCodeAt(i);
+		if (c < 128) out[p++] = c;
+		else if (c < 2048) {
+			out[p++] = c >> 6 | 192;
+			out[p++] = c & 63 | 128;
+		} else if ((c & 64512) === 55296 && i + 1 < str.length && (str.charCodeAt(i + 1) & 64512) === 56320) {
+			c = 65536 + ((c & 1023) << 10) + (str.charCodeAt(++i) & 1023);
+			out[p++] = c >> 18 | 240;
+			out[p++] = c >> 12 & 63 | 128;
+			out[p++] = c >> 6 & 63 | 128;
+			out[p++] = c & 63 | 128;
+		} else {
+			if (c >= 55296 && c <= 57343) c = 65533;
+			out[p++] = c >> 12 | 224;
+			out[p++] = c >> 6 & 63 | 128;
+			out[p++] = c & 63 | 128;
 		}
 	}
-	const { expectedProjectPreferences: _expected, expectedNodePreferences: _expectedNode, projectPreferences: _projects, ...persistedPatch } = patch;
-	let next = deepMerge(current, persistedPatch);
-	if (patch.initialModelSelection !== void 0) next = {
-		...next,
-		initialModelSelection: patch.initialModelSelection
-	};
-	if (patch.projectPreferences !== void 0) {
-		const projects = new Map(Object.entries(current.projectPreferences));
-		for (const [projectId, preferencesPatch] of Object.entries(patch.projectPreferences)) {
-			if (preferencesPatch === null) {
-				projects.delete(projectId);
-				continue;
-			}
-			const preferences = { ...projects.get(projectId) };
-			for (const [field, value] of Object.entries(preferencesPatch)) if (value === null && field !== "initialModelSelection") delete preferences[field];
-			else Object.assign(preferences, { [field]: value });
-			if (Object.keys(preferences).length) projects.set(projectId, preferences);
-			else projects.delete(projectId);
+	return out;
+}
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/bl.js
+/**
+* Bl is a list of byte chunks, similar to https://github.com/rvagg/bl but for
+* writing rather than reading.
+* A Bl object accepts set() operations for individual bytes and copyTo() for
+* inserting byte arrays. These write operations don't automatically increment
+* the internal cursor so its "length" won't be changed. Instead, increment()
+* must be called to extend its length to cover the inserted data.
+* The toBytes() call will convert all internal memory to a single Uint8Array of
+* the correct length, truncating any data that is stored but hasn't been
+* included by an increment().
+* get() can retrieve a single byte.
+* All operations (except toBytes()) take an "offset" argument that will perform
+* the write at the offset _from the current cursor_. For most operations this
+* will be `0` to write at the current cursor position but it can be ahead of
+* the current cursor. Negative offsets probably work but are untested.
+*/
+/**
+* @typedef {import('../interface.js').ByteView} ByteView
+* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
+*/
+const defaultChunkSize = 256;
+var Bl = class {
+	/**
+	* @param {number} [chunkSize]
+	*/
+	constructor(chunkSize = defaultChunkSize) {
+		this.chunkSize = chunkSize;
+		/** @type {number} */
+		this.cursor = 0;
+		/** @type {number} */
+		this.maxCursor = -1;
+		/** @type {(ByteView|number[])[]} */
+		this.chunks = [];
+		/** @type {ByteView|number[]|null} */
+		this._initReuseChunk = null;
+	}
+	reset() {
+		this.cursor = 0;
+		this.maxCursor = -1;
+		if (this.chunks.length) this.chunks = [];
+		if (this._initReuseChunk !== null) {
+			this.chunks.push(this._initReuseChunk);
+			this.maxCursor = this._initReuseChunk.length - 1;
 		}
-		next = {
-			...next,
-			projectPreferences: Object.fromEntries(projects)
-		};
 	}
-	if (patch.projectWorktreeSubmodules !== void 0) {
-		const modes = new Map(Object.entries(current.projectWorktreeSubmodules));
-		for (const [projectId, mode] of Object.entries(patch.projectWorktreeSubmodules)) if (mode === null) modes.delete(projectId);
-		else modes.set(projectId, mode);
-		next = {
-			...next,
-			projectWorktreeSubmodules: Object.fromEntries(modes)
-		};
+	/**
+	* @param {number} byte
+	*/
+	pushByte(byte) {
+		let topChunk = this.chunks[this.chunks.length - 1];
+		if (this.cursor > this.maxCursor) {
+			topChunk = alloc(this.chunkSize);
+			this.chunks.push(topChunk);
+			this.maxCursor += topChunk.length;
+			if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
+		}
+		const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
+		topChunk[chunkPos] = byte;
+		this.cursor++;
 	}
-	if (patch.projectWorktreeRoots !== void 0) {
-		const roots = new Map(Object.entries(current.projectWorktreeRoots));
-		for (const [projectId, root] of Object.entries(patch.projectWorktreeRoots)) if (root === null || root === "") roots.delete(projectId);
-		else roots.set(projectId, root);
-		next = {
-			...next,
-			projectWorktreeRoots: Object.fromEntries(roots)
-		};
+	/**
+	* @param {ByteView|number[]} bytes
+	*/
+	push(bytes) {
+		let topChunk = this.chunks[this.chunks.length - 1];
+		if (this.cursor + bytes.length <= this.maxCursor + 1) {
+			const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
+			topChunk.set(bytes, chunkPos);
+		} else {
+			if (topChunk) {
+				const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
+				if (chunkPos < topChunk.length) {
+					this.chunks[this.chunks.length - 1] = topChunk.subarray(0, chunkPos);
+					this.maxCursor = this.cursor - 1;
+				}
+			}
+			if (bytes.length < 64 && bytes.length < this.chunkSize) {
+				topChunk = alloc(this.chunkSize);
+				this.chunks.push(topChunk);
+				this.maxCursor += topChunk.length;
+				if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
+				topChunk.set(bytes, 0);
+			} else {
+				this.chunks.push(bytes);
+				this.maxCursor += bytes.length;
+			}
+		}
+		this.cursor += bytes.length;
 	}
-	if (patch.projectStorageRetention !== void 0) {
-		const policies = new Map(Object.entries(current.projectStorageRetention));
-		for (const [projectId, policy] of Object.entries(patch.projectStorageRetention)) if (policy === null) policies.delete(projectId);
-		else policies.set(projectId, policy);
-		next = {
-			...next,
-			projectStorageRetention: Object.fromEntries(policies)
-		};
+	/**
+	* @param {boolean} [reset]
+	* @returns {AllocatedByteView}
+	*/
+	toBytes(reset = false) {
+		let byts;
+		if (this.chunks.length === 1) {
+			const chunk = this.chunks[0];
+			if (reset && this.cursor > chunk.length / 2) {
+				byts = this.cursor === chunk.length ? chunk : chunk.subarray(0, this.cursor);
+				this._initReuseChunk = null;
+				this.chunks = [];
+			} else byts = slice(chunk, 0, this.cursor);
+		} else byts = concat(this.chunks, this.cursor);
+		if (reset) this.reset();
+		return byts;
 	}
-	const nextWithReplacements = patch.providerInstances !== void 0 ? {
-		...next,
-		providerInstances: patch.providerInstances
-	} : next;
-	if (!selectionPatch) return nextWithReplacements;
-	const instanceId = selectionPatch.instanceId ?? current.textGenerationModelSelection.instanceId;
-	const model = selectionPatch.model ?? current.textGenerationModelSelection.model;
-	const options = shouldReplaceTextGenerationModelSelection(selectionPatch) ? selectionPatch.options : mergeModelSelectionOptionsById({
-		current: current.textGenerationModelSelection.options,
-		patch: selectionPatch.options
-	});
-	return {
-		...nextWithReplacements,
-		textGenerationModelSelection: createModelSelection(instanceId, model, options)
-	};
-}
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/is.js
-const objectTypeNames = [
-	"Object",
-	"RegExp",
-	"Date",
-	"Error",
-	"Map",
-	"Set",
-	"WeakMap",
-	"WeakSet",
-	"ArrayBuffer",
-	"SharedArrayBuffer",
-	"DataView",
-	"Promise",
-	"URL",
-	"HTMLElement",
-	"Int8Array",
-	"Uint8ClampedArray",
-	"Int16Array",
-	"Uint16Array",
-	"Int32Array",
-	"Uint32Array",
-	"Float32Array",
-	"Float64Array",
-	"BigInt64Array",
-	"BigUint64Array",
-	"Tagged"
-];
-/**
-* @param {any} value
-* @returns {string}
-*/
-function is(value) {
-	if (value === null) return "null";
-	if (value === void 0) return "undefined";
-	if (value === true || value === false) return "boolean";
-	const typeOf = typeof value;
-	if (typeOf === "string" || typeOf === "number" || typeOf === "bigint" || typeOf === "symbol") return typeOf;
-	if (typeOf === "function") return "Function";
-	if (Array.isArray(value)) return "Array";
-	if (value instanceof Uint8Array) return "Uint8Array";
-	if (value.constructor === Object) return "Object";
-	const objectType = getObjectType(value);
-	if (objectType) return objectType;
-	return "Object";
-}
+};
 /**
-* @param {any} value
-* @returns {string|undefined}
+* U8Bl is a buffer list that writes directly to a user-provided Uint8Array.
+* It provides the same interface as Bl but writes to a fixed destination.
+* @template {ArrayBufferLike} T
 */
-function getObjectType(value) {
-	const objectTypeName = Object.prototype.toString.call(value).slice(8, -1);
-	if (objectTypeNames.includes(objectTypeName)) return objectTypeName;
-}
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/token.js
-var Type = class {
+var U8Bl = class {
 	/**
-	* @param {number} major
-	* @param {string} name
-	* @param {boolean} terminal
+	* @param {Uint8Array<T>} dest
 	*/
-	constructor(major, name, terminal) {
-		this.major = major;
-		this.majorEncoded = major << 5;
-		this.name = name;
-		this.terminal = terminal;
+	constructor(dest) {
+		this.dest = dest;
+		/** @type {number} */
+		this.cursor = 0;
+		/** @type {Array<Uint8Array<T>>} */
+		this.chunks = [dest];
 	}
-	toString() {
-		return `Type[${this.major}].${this.name}`;
+	reset() {
+		this.cursor = 0;
 	}
 	/**
-	* @param {Type} typ
-	* @returns {number}
+	* @param {number} byte
 	*/
-	compare(typ) {
-		return this.major < typ.major ? -1 : this.major > typ.major ? 1 : 0;
+	pushByte(byte) {
+		if (this.cursor >= this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
+		this.dest[this.cursor++] = byte;
 	}
 	/**
-	* Check equality between two Type instances. Safe to use across different
-	* copies of the Type class (e.g., when bundlers duplicate the module).
-	* (major, name) uniquely identifies a Type; terminal is implied by these.
-	* @param {Type} a
-	* @param {Type} b
-	* @returns {boolean}
+	* @param {ByteView|number[]} bytes
 	*/
-	static equals(a, b) {
-		return a === b || a.major === b.major && a.name === b.name;
+	push(bytes) {
+		if (this.cursor + bytes.length > this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
+		this.dest.set(bytes, this.cursor);
+		this.cursor += bytes.length;
 	}
-};
-Type.uint = new Type(0, "uint", true);
-Type.negint = new Type(1, "negint", true);
-Type.bytes = new Type(2, "bytes", true);
-Type.string = new Type(3, "string", true);
-Type.array = new Type(4, "array", false);
-Type.map = new Type(5, "map", false);
-Type.tag = new Type(6, "tag", false);
-Type.float = new Type(7, "float", true);
-Type.false = new Type(7, "false", true);
-Type.true = new Type(7, "true", true);
-Type.null = new Type(7, "null", true);
-Type.undefined = new Type(7, "undefined", true);
-Type.break = new Type(7, "break", true);
-var Token = class {
 	/**
-	* @param {Type} type
-	* @param {any} [value]
-	* @param {number} [encodedLength]
+	* @param {boolean} [reset]
+	* @returns {Uint8Array<T>}
 	*/
-	constructor(type, value, encodedLength) {
-		this.type = type;
-		this.value = value;
-		this.encodedLength = encodedLength;
-		/** @type {Uint8Array|undefined} */
-		this.encodedBytes = void 0;
-		/** @type {Uint8Array|undefined} */
-		this.byteValue = void 0;
-	}
-	toString() {
-		return `Token[${this.type}].${this.value}`;
+	toBytes(reset = false) {
+		const byts = this.dest.subarray(0, this.cursor);
+		if (reset) this.reset();
+		return byts;
 	}
 };
 //#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/byte-utils.js
-const useBuffer = globalThis.process && !globalThis.process.browser && globalThis.Buffer && typeof globalThis.Buffer.isBuffer === "function";
-const textEncoder$1 = new TextEncoder();
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/common.js
+const decodeErrPrefix = "CBOR decode error:";
+const encodeErrPrefix = "CBOR encode error:";
+const uintMinorPrefixBytes = [];
+uintMinorPrefixBytes[23] = 1;
+uintMinorPrefixBytes[24] = 2;
+uintMinorPrefixBytes[25] = 3;
+uintMinorPrefixBytes[26] = 5;
+uintMinorPrefixBytes[27] = 9;
 /**
-* @typedef {import('../interface.js').ByteView} ByteView
-* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} need
 */
+function assertEnoughData(data, pos, need) {
+	if (data.length - pos < need) throw new Error(`${decodeErrPrefix} not enough data for type`);
+}
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/0uint.js
+const uintBoundaries = [
+	24,
+	256,
+	65536,
+	4294967296,
+	BigInt("18446744073709551616")
+];
 /**
-* @param {Uint8Array} buf
-* @returns {boolean}
+* @typedef {import('../interface.js').ByteWriter} ByteWriter
+* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
 */
-function isBuffer(buf) {
-	return useBuffer && globalThis.Buffer.isBuffer(buf);
-}
 /**
-* @param {ByteView|number[]} buf
-* @returns {ByteView}
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number}
 */
-function asU8A(buf) {
-	if (!(buf instanceof Uint8Array)) return Uint8Array.from(buf);
-	return isBuffer(buf) ? new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength) : buf;
-}
-const FROM_STRING_THRESHOLD_BUFFER = 24;
-const FROM_STRING_THRESHOLD_TEXTENCODER = 200;
-const fromString = useBuffer ? (string) => {
-	return string.length >= FROM_STRING_THRESHOLD_BUFFER ? globalThis.Buffer.from(string) : utf8ToBytes(string);
-} : 
+function readUint8(data, offset, options) {
+	assertEnoughData(data, offset, 1);
+	const value = data[offset];
+	if (options.strict === true && value < uintBoundaries[0]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	return value;
+}
 /**
-* @param {string} string
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number}
 */
-(string) => {
-	return string.length >= FROM_STRING_THRESHOLD_TEXTENCODER ? textEncoder$1.encode(string) : utf8ToBytes(string);
-};
+function readUint16(data, offset, options) {
+	assertEnoughData(data, offset, 2);
+	const value = data[offset] << 8 | data[offset + 1];
+	if (options.strict === true && value < uintBoundaries[1]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	return value;
+}
 /**
-* Buffer variant not fast enough for what we need
-* @param {number[]} arr
-* @returns {AllocatedByteView}
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number}
 */
-const fromArray = (arr) => {
-	return Uint8Array.from(arr);
-};
-const slice = useBuffer ? (bytes, start, end) => {
-	if (isBuffer(bytes)) return new Uint8Array(bytes.subarray(start, end));
-	return bytes.slice(start, end);
-} : 
+function readUint32(data, offset, options) {
+	assertEnoughData(data, offset, 4);
+	const value = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
+	if (options.strict === true && value < uintBoundaries[2]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	return value;
+}
 /**
-* @param {Uint8Array} bytes
-* @param {number} start
-* @param {number} end
+* @param {Uint8Array} data
+* @param {number} offset
+* @param {DecodeOptions} options
+* @returns {number|bigint}
 */
-(bytes, start, end) => {
-	return bytes.slice(start, end);
-};
-const concat = useBuffer ? (chunks, length) => {
-	chunks = chunks.map((c) => c instanceof Uint8Array ? c : globalThis.Buffer.from(c));
-	return asU8A(globalThis.Buffer.concat(chunks, length));
-} : 
+function readUint64(data, offset, options) {
+	assertEnoughData(data, offset, 8);
+	const hi = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
+	const lo = data[offset + 4] * 16777216 + (data[offset + 5] << 16) + (data[offset + 6] << 8) + data[offset + 7];
+	const value = (BigInt(hi) << BigInt(32)) + BigInt(lo);
+	if (options.strict === true && value < uintBoundaries[3]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
+	if (value <= Number.MAX_SAFE_INTEGER) return Number(value);
+	if (options.allowBigInt === true) return value;
+	throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
+}
 /**
-* @param {ByteView[]} chunks
-* @param {number} length
-* @returns {AllocatedByteView}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-(chunks, length) => {
-	const out = new Uint8Array(length);
-	let off = 0;
-	for (let b of chunks) {
-		if (off + b.length > out.length) b = b.subarray(0, out.length - off);
-		out.set(b, off);
-		off += b.length;
-	}
-	return out;
-};
-const alloc = useBuffer ? (size) => {
-	return globalThis.Buffer.allocUnsafe(size);
-} : 
+function decodeUint8(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint8(data, pos + 1, options), 2);
+}
 /**
-* @param {number} size
-* @returns {AllocatedByteView}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-(size) => {
-	return new Uint8Array(size);
-};
+function decodeUint16(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint16(data, pos + 1, options), 3);
+}
 /**
-* @param {Uint8Array} b1
-* @param {Uint8Array} b2
-* @returns {number}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-function compare(b1, b2) {
-	if (isBuffer(b1) && isBuffer(b2)) return b1.compare(b2);
-	for (let i = 0; i < b1.length; i++) {
-		if (b1[i] === b2[i]) continue;
-		return b1[i] < b2[i] ? -1 : 1;
-	}
-	return 0;
+function decodeUint32(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint32(data, pos + 1, options), 5);
 }
 /**
-* @param {string} str
-* @returns {number[]}
+* @param {Uint8Array} data
+* @param {number} pos
+* @param {number} _minor
+* @param {DecodeOptions} options
+* @returns {Token}
 */
-function utf8ToBytes(str) {
-	const out = [];
-	let p = 0;
-	for (let i = 0; i < str.length; i++) {
-		let c = str.charCodeAt(i);
-		if (c < 128) out[p++] = c;
-		else if (c < 2048) {
-			out[p++] = c >> 6 | 192;
-			out[p++] = c & 63 | 128;
-		} else if ((c & 64512) === 55296 && i + 1 < str.length && (str.charCodeAt(i + 1) & 64512) === 56320) {
-			c = 65536 + ((c & 1023) << 10) + (str.charCodeAt(++i) & 1023);
-			out[p++] = c >> 18 | 240;
-			out[p++] = c >> 12 & 63 | 128;
-			out[p++] = c >> 6 & 63 | 128;
-			out[p++] = c & 63 | 128;
-		} else {
-			if (c >= 55296 && c <= 57343) c = 65533;
-			out[p++] = c >> 12 | 224;
-			out[p++] = c >> 6 & 63 | 128;
-			out[p++] = c & 63 | 128;
-		}
-	}
-	return out;
+function decodeUint64(data, pos, _minor, options) {
+	return new Token(Type.uint, readUint64(data, pos + 1, options), 9);
 }
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/bl.js
 /**
-* Bl is a list of byte chunks, similar to https://github.com/rvagg/bl but for
-* writing rather than reading.
-* A Bl object accepts set() operations for individual bytes and copyTo() for
-* inserting byte arrays. These write operations don't automatically increment
-* the internal cursor so its "length" won't be changed. Instead, increment()
-* must be called to extend its length to cover the inserted data.
-* The toBytes() call will convert all internal memory to a single Uint8Array of
-* the correct length, truncating any data that is stored but hasn't been
-* included by an increment().
-* get() can retrieve a single byte.
-* All operations (except toBytes()) take an "offset" argument that will perform
-* the write at the offset _from the current cursor_. For most operations this
-* will be `0` to write at the current cursor position but it can be ahead of
-* the current cursor. Negative offsets probably work but are untested.
+* @param {ByteWriter} writer
+* @param {Token} token
 */
+function encodeUint(writer, token) {
+	return encodeUintValue(writer, 0, token.value);
+}
 /**
-* @typedef {import('../interface.js').ByteView} ByteView
-* @typedef {import('../interface.js').AllocatedByteView} AllocatedByteView
+* @param {ByteWriter} writer
+* @param {number} major
+* @param {number|bigint} uint
 */
-const defaultChunkSize = 256;
-var Bl = class {
-	/**
-	* @param {number} [chunkSize]
-	*/
-	constructor(chunkSize = defaultChunkSize) {
-		this.chunkSize = chunkSize;
-		/** @type {number} */
-		this.cursor = 0;
-		/** @type {number} */
-		this.maxCursor = -1;
-		/** @type {(ByteView|number[])[]} */
-		this.chunks = [];
-		/** @type {ByteView|number[]|null} */
-		this._initReuseChunk = null;
+function encodeUintValue(writer, major, uint) {
+	if (uint < uintBoundaries[0]) {
+		const nuint = Number(uint);
+		writer.pushByte(major | nuint);
+	} else if (uint < uintBoundaries[1]) {
+		const nuint = Number(uint);
+		writer.push([major | 24, nuint]);
+	} else if (uint < uintBoundaries[2]) {
+		const nuint = Number(uint);
+		writer.push([
+			major | 25,
+			nuint >>> 8,
+			nuint & 255
+		]);
+	} else if (uint < uintBoundaries[3]) {
+		const nuint = Number(uint);
+		writer.push([
+			major | 26,
+			nuint >>> 24 & 255,
+			nuint >>> 16 & 255,
+			nuint >>> 8 & 255,
+			nuint & 255
+		]);
+	} else {
+		const buint = BigInt(uint);
+		if (buint < uintBoundaries[4]) {
+			const set = [
+				major | 27,
+				0,
+				0,
+				0,
+				0,
+				0,
+				0,
+				0
+			];
+			let lo = Number(buint & BigInt(4294967295));
+			let hi = Number(buint >> BigInt(32) & BigInt(4294967295));
+			set[8] = lo & 255;
+			lo = lo >> 8;
+			set[7] = lo & 255;
+			lo = lo >> 8;
+			set[6] = lo & 255;
+			lo = lo >> 8;
+			set[5] = lo & 255;
+			set[4] = hi & 255;
+			hi = hi >> 8;
+			set[3] = hi & 255;
+			hi = hi >> 8;
+			set[2] = hi & 255;
+			hi = hi >> 8;
+			set[1] = hi & 255;
+			writer.push(set);
+		} else throw new Error(`${decodeErrPrefix} encountered BigInt larger than allowable range`);
 	}
-	reset() {
-		this.cursor = 0;
-		this.maxCursor = -1;
-		if (this.chunks.length) this.chunks = [];
-		if (this._initReuseChunk !== null) {
-			this.chunks.push(this._initReuseChunk);
-			this.maxCursor = this._initReuseChunk.length - 1;
-		}
-	}
-	/**
-	* @param {number} byte
-	*/
-	pushByte(byte) {
-		let topChunk = this.chunks[this.chunks.length - 1];
-		if (this.cursor > this.maxCursor) {
-			topChunk = alloc(this.chunkSize);
-			this.chunks.push(topChunk);
-			this.maxCursor += topChunk.length;
-			if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
-		}
-		const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
-		topChunk[chunkPos] = byte;
-		this.cursor++;
-	}
-	/**
-	* @param {ByteView|number[]} bytes
-	*/
-	push(bytes) {
-		let topChunk = this.chunks[this.chunks.length - 1];
-		if (this.cursor + bytes.length <= this.maxCursor + 1) {
-			const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
-			topChunk.set(bytes, chunkPos);
-		} else {
-			if (topChunk) {
-				const chunkPos = topChunk.length - (this.maxCursor - this.cursor) - 1;
-				if (chunkPos < topChunk.length) {
-					this.chunks[this.chunks.length - 1] = topChunk.subarray(0, chunkPos);
-					this.maxCursor = this.cursor - 1;
-				}
-			}
-			if (bytes.length < 64 && bytes.length < this.chunkSize) {
-				topChunk = alloc(this.chunkSize);
-				this.chunks.push(topChunk);
-				this.maxCursor += topChunk.length;
-				if (this._initReuseChunk === null) this._initReuseChunk = topChunk;
-				topChunk.set(bytes, 0);
-			} else {
-				this.chunks.push(bytes);
-				this.maxCursor += bytes.length;
-			}
-		}
-		this.cursor += bytes.length;
-	}
-	/**
-	* @param {boolean} [reset]
-	* @returns {AllocatedByteView}
-	*/
-	toBytes(reset = false) {
-		let byts;
-		if (this.chunks.length === 1) {
-			const chunk = this.chunks[0];
-			if (reset && this.cursor > chunk.length / 2) {
-				byts = this.cursor === chunk.length ? chunk : chunk.subarray(0, this.cursor);
-				this._initReuseChunk = null;
-				this.chunks = [];
-			} else byts = slice(chunk, 0, this.cursor);
-		} else byts = concat(this.chunks, this.cursor);
-		if (reset) this.reset();
-		return byts;
-	}
-};
-/**
-* U8Bl is a buffer list that writes directly to a user-provided Uint8Array.
-* It provides the same interface as Bl but writes to a fixed destination.
-* @template {ArrayBufferLike} T
-*/
-var U8Bl = class {
-	/**
-	* @param {Uint8Array<T>} dest
-	*/
-	constructor(dest) {
-		this.dest = dest;
-		/** @type {number} */
-		this.cursor = 0;
-		/** @type {Array<Uint8Array<T>>} */
-		this.chunks = [dest];
-	}
-	reset() {
-		this.cursor = 0;
-	}
-	/**
-	* @param {number} byte
-	*/
-	pushByte(byte) {
-		if (this.cursor >= this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
-		this.dest[this.cursor++] = byte;
-	}
-	/**
-	* @param {ByteView|number[]} bytes
-	*/
-	push(bytes) {
-		if (this.cursor + bytes.length > this.dest.length) throw new Error("write out of bounds, destination buffer is too small");
-		this.dest.set(bytes, this.cursor);
-		this.cursor += bytes.length;
-	}
-	/**
-	* @param {boolean} [reset]
-	* @returns {Uint8Array<T>}
-	*/
-	toBytes(reset = false) {
-		const byts = this.dest.subarray(0, this.cursor);
-		if (reset) this.reset();
-		return byts;
-	}
-};
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/common.js
-const decodeErrPrefix = "CBOR decode error:";
-const encodeErrPrefix = "CBOR encode error:";
-const uintMinorPrefixBytes = [];
-uintMinorPrefixBytes[23] = 1;
-uintMinorPrefixBytes[24] = 2;
-uintMinorPrefixBytes[25] = 3;
-uintMinorPrefixBytes[26] = 5;
-uintMinorPrefixBytes[27] = 9;
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} need
-*/
-function assertEnoughData(data, pos, need) {
-	if (data.length - pos < need) throw new Error(`${decodeErrPrefix} not enough data for type`);
 }
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/0uint.js
-const uintBoundaries = [
-	24,
-	256,
-	65536,
-	4294967296,
-	BigInt("18446744073709551616")
-];
-/**
-* @typedef {import('../interface.js').ByteWriter} ByteWriter
-* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
-*/
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
+* @param {Token} token
 * @returns {number}
 */
-function readUint8(data, offset, options) {
-	assertEnoughData(data, offset, 1);
-	const value = data[offset];
-	if (options.strict === true && value < uintBoundaries[0]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	return value;
-}
+encodeUint.encodedSize = function encodedSize(token) {
+	return encodeUintValue.encodedSize(token.value);
+};
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
+* @param {number} uint
 * @returns {number}
 */
-function readUint16(data, offset, options) {
-	assertEnoughData(data, offset, 2);
-	const value = data[offset] << 8 | data[offset + 1];
-	if (options.strict === true && value < uintBoundaries[1]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	return value;
-}
+encodeUintValue.encodedSize = function encodedSize(uint) {
+	if (uint < uintBoundaries[0]) return 1;
+	if (uint < uintBoundaries[1]) return 2;
+	if (uint < uintBoundaries[2]) return 3;
+	if (uint < uintBoundaries[3]) return 5;
+	return 9;
+};
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
+* @param {Token} tok1
+* @param {Token} tok2
 * @returns {number}
 */
-function readUint32(data, offset, options) {
-	assertEnoughData(data, offset, 4);
-	const value = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
-	if (options.strict === true && value < uintBoundaries[2]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	return value;
-}
+encodeUint.compareTokens = function compareTokens(tok1, tok2) {
+	return tok1.value < tok2.value ? -1 : tok1.value > tok2.value ? 1 : 0;
+};
+//#endregion
+//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/1negint.js
 /**
-* @param {Uint8Array} data
-* @param {number} offset
-* @param {DecodeOptions} options
-* @returns {number|bigint}
+* @typedef {import('../interface.js').ByteWriter} ByteWriter
+* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
 */
-function readUint64(data, offset, options) {
-	assertEnoughData(data, offset, 8);
-	const hi = data[offset] * 16777216 + (data[offset + 1] << 16) + (data[offset + 2] << 8) + data[offset + 3];
-	const lo = data[offset + 4] * 16777216 + (data[offset + 5] << 16) + (data[offset + 6] << 8) + data[offset + 7];
-	const value = (BigInt(hi) << BigInt(32)) + BigInt(lo);
-	if (options.strict === true && value < uintBoundaries[3]) throw new Error(`${decodeErrPrefix} integer encoded in more bytes than necessary (strict decode)`);
-	if (value <= Number.MAX_SAFE_INTEGER) return Number(value);
-	if (options.allowBigInt === true) return value;
-	throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
-}
 /**
 * @param {Uint8Array} data
 * @param {number} pos
@@ -783,8 +648,8 @@ function readUint64(data, offset, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint8(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint8(data, pos + 1, options), 2);
+function decodeNegint8(data, pos, _minor, options) {
+	return new Token(Type.negint, -1 - readUint8(data, pos + 1, options), 2);
 }
 /**
 * @param {Uint8Array} data
@@ -793,8 +658,8 @@ function decodeUint8(data, pos, _minor, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint16(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint16(data, pos + 1, options), 3);
+function decodeNegint16(data, pos, _minor, options) {
+	return new Token(Type.negint, -1 - readUint16(data, pos + 1, options), 3);
 }
 /**
 * @param {Uint8Array} data
@@ -803,9 +668,11 @@ function decodeUint16(data, pos, _minor, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint32(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint32(data, pos + 1, options), 5);
+function decodeNegint32(data, pos, _minor, options) {
+	return new Token(Type.negint, -1 - readUint32(data, pos + 1, options), 5);
 }
+const neg1b$1 = BigInt(-1);
+const pos1b$1 = BigInt(1);
 /**
 * @param {Uint8Array} data
 * @param {number} pos
@@ -813,169 +680,27 @@ function decodeUint32(data, pos, _minor, options) {
 * @param {DecodeOptions} options
 * @returns {Token}
 */
-function decodeUint64(data, pos, _minor, options) {
-	return new Token(Type.uint, readUint64(data, pos + 1, options), 9);
+function decodeNegint64(data, pos, _minor, options) {
+	const int = readUint64(data, pos + 1, options);
+	if (typeof int !== "bigint") {
+		const value = -1 - int;
+		if (value >= Number.MIN_SAFE_INTEGER) return new Token(Type.negint, value, 9);
+	}
+	if (options.allowBigInt !== true) throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
+	return new Token(Type.negint, neg1b$1 - BigInt(int), 9);
 }
 /**
 * @param {ByteWriter} writer
 * @param {Token} token
 */
-function encodeUint(writer, token) {
-	return encodeUintValue(writer, 0, token.value);
+function encodeNegint(writer, token) {
+	const negint = token.value;
+	const unsigned = typeof negint === "bigint" ? negint * neg1b$1 - pos1b$1 : negint * -1 - 1;
+	encodeUintValue(writer, token.type.majorEncoded, unsigned);
 }
 /**
-* @param {ByteWriter} writer
-* @param {number} major
-* @param {number|bigint} uint
-*/
-function encodeUintValue(writer, major, uint) {
-	if (uint < uintBoundaries[0]) {
-		const nuint = Number(uint);
-		writer.pushByte(major | nuint);
-	} else if (uint < uintBoundaries[1]) {
-		const nuint = Number(uint);
-		writer.push([major | 24, nuint]);
-	} else if (uint < uintBoundaries[2]) {
-		const nuint = Number(uint);
-		writer.push([
-			major | 25,
-			nuint >>> 8,
-			nuint & 255
-		]);
-	} else if (uint < uintBoundaries[3]) {
-		const nuint = Number(uint);
-		writer.push([
-			major | 26,
-			nuint >>> 24 & 255,
-			nuint >>> 16 & 255,
-			nuint >>> 8 & 255,
-			nuint & 255
-		]);
-	} else {
-		const buint = BigInt(uint);
-		if (buint < uintBoundaries[4]) {
-			const set = [
-				major | 27,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0
-			];
-			let lo = Number(buint & BigInt(4294967295));
-			let hi = Number(buint >> BigInt(32) & BigInt(4294967295));
-			set[8] = lo & 255;
-			lo = lo >> 8;
-			set[7] = lo & 255;
-			lo = lo >> 8;
-			set[6] = lo & 255;
-			lo = lo >> 8;
-			set[5] = lo & 255;
-			set[4] = hi & 255;
-			hi = hi >> 8;
-			set[3] = hi & 255;
-			hi = hi >> 8;
-			set[2] = hi & 255;
-			hi = hi >> 8;
-			set[1] = hi & 255;
-			writer.push(set);
-		} else throw new Error(`${decodeErrPrefix} encountered BigInt larger than allowable range`);
-	}
-}
-/**
-* @param {Token} token
-* @returns {number}
-*/
-encodeUint.encodedSize = function encodedSize(token) {
-	return encodeUintValue.encodedSize(token.value);
-};
-/**
-* @param {number} uint
-* @returns {number}
-*/
-encodeUintValue.encodedSize = function encodedSize(uint) {
-	if (uint < uintBoundaries[0]) return 1;
-	if (uint < uintBoundaries[1]) return 2;
-	if (uint < uintBoundaries[2]) return 3;
-	if (uint < uintBoundaries[3]) return 5;
-	return 9;
-};
-/**
-* @param {Token} tok1
-* @param {Token} tok2
-* @returns {number}
-*/
-encodeUint.compareTokens = function compareTokens(tok1, tok2) {
-	return tok1.value < tok2.value ? -1 : tok1.value > tok2.value ? 1 : 0;
-};
-//#endregion
-//#region ../../node_modules/.bun/cborg@6.1.2/node_modules/cborg/lib/1negint.js
-/**
-* @typedef {import('../interface.js').ByteWriter} ByteWriter
-* @typedef {import('../interface.js').DecodeOptions} DecodeOptions
-*/
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint8(data, pos, _minor, options) {
-	return new Token(Type.negint, -1 - readUint8(data, pos + 1, options), 2);
-}
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint16(data, pos, _minor, options) {
-	return new Token(Type.negint, -1 - readUint16(data, pos + 1, options), 3);
-}
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint32(data, pos, _minor, options) {
-	return new Token(Type.negint, -1 - readUint32(data, pos + 1, options), 5);
-}
-const neg1b$1 = BigInt(-1);
-const pos1b$1 = BigInt(1);
-/**
-* @param {Uint8Array} data
-* @param {number} pos
-* @param {number} _minor
-* @param {DecodeOptions} options
-* @returns {Token}
-*/
-function decodeNegint64(data, pos, _minor, options) {
-	const int = readUint64(data, pos + 1, options);
-	if (typeof int !== "bigint") {
-		const value = -1 - int;
-		if (value >= Number.MIN_SAFE_INTEGER) return new Token(Type.negint, value, 9);
-	}
-	if (options.allowBigInt !== true) throw new Error(`${decodeErrPrefix} integers outside of the safe integer range are not supported`);
-	return new Token(Type.negint, neg1b$1 - BigInt(int), 9);
-}
-/**
-* @param {ByteWriter} writer
-* @param {Token} token
-*/
-function encodeNegint(writer, token) {
-	const negint = token.value;
-	const unsigned = typeof negint === "bigint" ? negint * neg1b$1 - pos1b$1 : negint * -1 - 1;
-	encodeUintValue(writer, token.type.majorEncoded, unsigned);
-}
-/**
-* @param {Token} token
-* @returns {number}
+* @param {Token} token
+* @returns {number}
 */
 encodeNegint.encodedSize = function encodedSize(token) {
 	const negint = token.value;
@@ -2520,305 +2245,604 @@ function* tokenToMapEntries(token, tokeniser, options) {
 		if (value === DONE) throw new Error(`${decodeErrPrefix} found map but not enough entries (got ${i} [no value], expected ${token.value})`);
 		yield [key, value];
 	}
-}
-/**
-* Creates a TagDecodeControl object for tag decoders.
-* @param {DecodeTokenizer} tokeniser
-* @param {DecodeOptions} options
-* @returns {TagDecodeControl}
-*/
-function createTagDecodeControl(tokeniser, options) {
-	/** @type {TagDecodeControl & {_called: boolean}} */
-	const decode = function() {
-		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
-		decode._called = true;
-		const value = tokensToObject(tokeniser, options);
-		if (value === DONE) throw new Error(`${decodeErrPrefix} tag content missing`);
-		if (value === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break in tag content`);
-		return value;
+}
+/**
+* Creates a TagDecodeControl object for tag decoders.
+* @param {DecodeTokenizer} tokeniser
+* @param {DecodeOptions} options
+* @returns {TagDecodeControl}
+*/
+function createTagDecodeControl(tokeniser, options) {
+	/** @type {TagDecodeControl & {_called: boolean}} */
+	const decode = function() {
+		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
+		decode._called = true;
+		const value = tokensToObject(tokeniser, options);
+		if (value === DONE) throw new Error(`${decodeErrPrefix} tag content missing`);
+		if (value === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break in tag content`);
+		return value;
+	};
+	decode.entries = function() {
+		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
+		decode._called = true;
+		const token = tokeniser.next();
+		if (!Type.equals(token.type, Type.map)) throw new Error(`${decodeErrPrefix} entries() requires map content, got ${token.type.name}`);
+		const entries = [];
+		for (const entry of tokenToMapEntries(token, tokeniser, options)) entries.push(entry);
+		return entries;
+	};
+	decode._called = false;
+	return decode;
+}
+/**
+* @param {DecodeTokenizer} tokeniser
+* @param {DecodeOptions} options
+* @returns {any|typeof BREAK|typeof DONE}
+*/
+function tokensToObject(tokeniser, options) {
+	if (tokeniser.done()) return DONE;
+	const token = tokeniser.next();
+	if (Type.equals(token.type, Type.break)) return BREAK;
+	if (token.type.terminal) return token.value;
+	if (Type.equals(token.type, Type.array)) return tokenToArray(token, tokeniser, options);
+	if (Type.equals(token.type, Type.map)) return tokenToMap(token, tokeniser, options);
+	if (Type.equals(token.type, Type.tag)) {
+		if (options.tags && typeof options.tags[token.value] === "function") {
+			const decodeControl = createTagDecodeControl(tokeniser, options);
+			const result = options.tags[token.value](decodeControl);
+			if (!decodeControl._called) throw new Error(`${decodeErrPrefix} tag decoder must call decode() or entries()`);
+			return result;
+		}
+		throw new Error(`${decodeErrPrefix} tag not supported (${token.value})`);
+	}
+	throw new Error("unsupported");
+}
+/**
+* @param {Uint8Array} data
+* @param {DecodeOptions} [options]
+* @returns {[any, Uint8Array]}
+*/
+function decodeFirst(data, options) {
+	if (!(data instanceof Uint8Array)) throw new Error(`${decodeErrPrefix} data to decode must be a Uint8Array`);
+	options = Object.assign({}, defaultDecodeOptions, options);
+	const u8aData = asU8A(data);
+	const tokeniser = options.tokenizer || new Tokeniser(u8aData, options);
+	const decoded = tokensToObject(tokeniser, options);
+	if (decoded === DONE) throw new Error(`${decodeErrPrefix} did not find any content to decode`);
+	if (decoded === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break`);
+	return [decoded, data.subarray(tokeniser.pos())];
+}
+/**
+* @param {Uint8Array} data
+* @param {DecodeOptions} [options]
+* @returns {any}
+*/
+function decode(data, options) {
+	const [decoded, remainder] = decodeFirst(data, options);
+	if (remainder.length > 0) throw new Error(`${decodeErrPrefix} too many terminals, data makes no sense`);
+	return decoded;
+}
+Object.defineProperty(class Tagged {
+	/**
+	* @param {number} tag - CBOR tag number, a non-negative integer
+	* @param {any} value - The value to be tagged; encoded recursively
+	*/
+	constructor(tag, value) {
+		if (typeof tag !== "number" || !Number.isInteger(tag) || tag < 0) throw new TypeError("Tagged: tag must be a non-negative integer");
+		this.tag = tag;
+		this.value = value;
+	}
+	/**
+	* Build a tag decoder for use in `decode()`'s `tags` option that returns the
+	* decoded content wrapped in a `Tagged` instance, preserving the tag number
+	* for the caller to inspect.
+	*
+	* @param {number} tag - The CBOR tag number this decoder will be registered for
+	* @returns {TaggedTagDecoder}
+	*
+	* @example
+	* import { decode, Tagged } from 'cborg'
+	* const value = decode(bytes, { tags: { 16: Tagged.decoder(16) } })
+	* // value instanceof Tagged; value.tag === 16
+	*/
+	static decoder(tag) {
+		return (decode) => new Tagged(tag, decode());
+	}
+	/**
+	* Build a `tags` option for `decode()` that wraps each listed tag number in
+	* a `Tagged` instance, preserving those tags through decode without
+	* registering a dedicated decoder per tag.
+	*
+	* @param {...number} tagNumbers - One or more CBOR tag numbers to preserve
+	* @returns {{[tagNumber: number]: TaggedTagDecoder}}
+	*
+	* @example
+	* import { decode, Tagged } from 'cborg'
+	* const value = decode(bytes, { tags: Tagged.preserve(16, 96) })
+	*/
+	static preserve(...tagNumbers) {
+		/** @type {{[tagNumber: number]: TaggedTagDecoder}} */
+		const tags = {};
+		for (const tag of tagNumbers) tags[tag] = Tagged.decoder(tag);
+		return tags;
+	}
+}.prototype, Symbol.toStringTag, { value: "Tagged" });
+//#endregion
+//#region ../../packages/shared/src/nodeIdentity.ts
+const NODE_AUTH_TRANSCRIPT_DOMAIN = "ryco.node-auth.proof.v1";
+const NODE_KEY_FINGERPRINT_DOMAIN = "ryco.node-key.v1";
+const NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN = "ryco.node-key-rotation.proof.v1";
+const NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN = "ryco.native-node-claim.proof.v1";
+var NodeIdentityValidationError = class extends Error {
+	code = "invalid_node_identity_input";
+	constructor() {
+		super("Node identity input is invalid.");
+		this.name = "NodeIdentityValidationError";
+	}
+};
+const ID_SUFFIX = "[A-Za-z0-9_-]{22}";
+const NODE_ID = new RegExp(`^node_${ID_SUFFIX}$`);
+const NODE_KEY_ID = new RegExp(`^nkey_${ID_SUFFIX}$`);
+const ROTATION_REQUEST_ID = new RegExp(`^nrot_${ID_SUFFIX}$`);
+const PUBLIC_ID_SUFFIX = "[A-Za-z0-9_-]{22,43}";
+const ACCOUNT_ID = new RegExp(`^acct_${PUBLIC_ID_SUFFIX}$`);
+const SPACE_ID = new RegExp(`^space_${PUBLIC_ID_SUFFIX}$`);
+const SESSION_ID = new RegExp(`^sess_${PUBLIC_ID_SUFFIX}$`);
+const NATIVE_NODE_CLAIM_ID = new RegExp(`^nclaim_${PUBLIC_ID_SUFFIX}$`);
+const DESKTOP_INSTALLATION_ID = new RegExp(`^install_${PUBLIC_ID_SUFFIX}$`);
+const ENVIRONMENT_ID = /^env_[A-Za-z0-9_-]{22}$/;
+const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"[::1]"
+]);
+function invalid() {
+	throw new NodeIdentityValidationError();
+}
+function assertUnsignedSafeInteger(value) {
+	if (!Number.isSafeInteger(value) || value < 0) invalid();
+}
+function assertProtocolVersion(value) {
+	if (!Number.isSafeInteger(value) || value < 0 || value > 65535) invalid();
+}
+function assertIdentifier(value, pattern) {
+	if (!pattern.test(value)) invalid();
+}
+function copyBytes(value, expectedLengths) {
+	if (!(value instanceof Uint8Array) || !expectedLengths.includes(value.byteLength)) invalid();
+	return Uint8Array.from(value);
+}
+function canonicalizeHubOrigin(value) {
+	if (typeof value !== "string" || value.length === 0 || value.length > 512) invalid();
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return invalid();
+	}
+	const isLoopbackHttp = url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname);
+	if (url.protocol !== "https:" && !isLoopbackHttp || url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "" || value !== url.origin) invalid();
+	return url.origin;
+}
+function normalizeHubNodeName(value) {
+	if (typeof value !== "string") invalid();
+	const normalized = value.trim();
+	if (normalized.length === 0 || normalized.length > 100) invalid();
+	return normalized;
+}
+function validateNodePublicKey(descriptor) {
+	if (descriptor.algorithm === "ed25519") return {
+		algorithm: descriptor.algorithm,
+		publicKey: copyBytes(descriptor.publicKey, [32])
+	};
+	if (descriptor.algorithm === "p256") {
+		const publicKey = copyBytes(descriptor.publicKey, [33, 65]);
+		const prefix = publicKey[0];
+		if (publicKey.byteLength === 33 && prefix !== 2 && prefix !== 3 || publicKey.byteLength === 65 && prefix !== 4) invalid();
+		return {
+			algorithm: descriptor.algorithm,
+			publicKey
+		};
+	}
+	return invalid();
+}
+function fingerprintNodePublicKey(descriptor) {
+	const key = validateNodePublicKey(descriptor);
+	const canonical = encode([
+		NODE_KEY_FINGERPRINT_DOMAIN,
+		key.algorithm,
+		key.publicKey
+	], rfc8949EncodeOptions);
+	return Uint8Array.from((0, node_crypto.createHash)("sha256").update(canonical).digest());
+}
+function formatNodePublicKeyFingerprint(fingerprint) {
+	const bytes = copyBytes(fingerprint, [32]);
+	return `SHA256:${Buffer.from(bytes).toString("base64url")}`;
+}
+function encodeNodeAuthenticationTranscript(input) {
+	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
+	assertProtocolVersion(input.protocolMajor);
+	assertProtocolVersion(input.protocolMinor);
+	assertIdentifier(input.nodeId, NODE_ID);
+	assertIdentifier(input.activeKeyId, NODE_KEY_ID);
+	assertUnsignedSafeInteger(input.challengeExpiresAt);
+	const challenge = copyBytes(input.challenge, [32]);
+	return Uint8Array.from(encode([
+		NODE_AUTH_TRANSCRIPT_DOMAIN,
+		hubOrigin,
+		input.protocolMajor,
+		input.protocolMinor,
+		input.nodeId,
+		input.activeKeyId,
+		input.challengeExpiresAt,
+		challenge
+	], rfc8949EncodeOptions));
+}
+function encodeNodeKeyRotationTranscript(input) {
+	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
+	assertProtocolVersion(input.protocolMajor);
+	assertProtocolVersion(input.protocolMinor);
+	assertIdentifier(input.rotationRequestId, ROTATION_REQUEST_ID);
+	assertIdentifier(input.nodeId, NODE_ID);
+	assertIdentifier(input.oldActiveKeyId, NODE_KEY_ID);
+	assertIdentifier(input.newKeyId, NODE_KEY_ID);
+	assertUnsignedSafeInteger(input.challengeExpiresAt);
+	const newKey = validateNodePublicKey(input.newKey);
+	const fingerprint = fingerprintNodePublicKey(newKey);
+	const challenge = copyBytes(input.challenge, [32]);
+	return Uint8Array.from(encode([
+		NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN,
+		hubOrigin,
+		input.protocolMajor,
+		input.protocolMinor,
+		input.rotationRequestId,
+		input.nodeId,
+		input.oldActiveKeyId,
+		input.newKeyId,
+		newKey.algorithm,
+		newKey.publicKey,
+		fingerprint,
+		input.challengeExpiresAt,
+		challenge
+	], rfc8949EncodeOptions));
+}
+function encodeNativeNodeClaimTranscript(input) {
+	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
+	assertProtocolVersion(input.protocolVersion);
+	assertProtocolVersion(input.transcriptVersion);
+	assertIdentifier(input.claimId, NATIVE_NODE_CLAIM_ID);
+	assertIdentifier(input.accountId, ACCOUNT_ID);
+	assertIdentifier(input.spaceId, SPACE_ID);
+	assertIdentifier(input.sessionId, SESSION_ID);
+	const dpopKeyThumbprint = copyBytes(input.dpopKeyThumbprint, [32]);
+	assertIdentifier(input.installationId, DESKTOP_INSTALLATION_ID);
+	assertIdentifier(input.environmentId, ENVIRONMENT_ID);
+	const nodeKey = validateNodePublicKey(input.nodeKey);
+	const nodeFingerprint = fingerprintNodePublicKey(nodeKey);
+	assertUnsignedSafeInteger(input.claimExpiresAt);
+	const challenge = copyBytes(input.challenge, [32]);
+	return Uint8Array.from(encode([
+		NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN,
+		hubOrigin,
+		input.protocolVersion,
+		input.transcriptVersion,
+		input.claimId,
+		input.accountId,
+		input.spaceId,
+		input.sessionId,
+		dpopKeyThumbprint,
+		input.installationId,
+		input.environmentId,
+		nodeKey.algorithm,
+		nodeKey.publicKey,
+		nodeFingerprint,
+		input.claimExpiresAt,
+		challenge
+	], rfc8949EncodeOptions));
+}
+function equalNodeIdentityBytes(left, right) {
+	if (!(left instanceof Uint8Array) || !(right instanceof Uint8Array)) return false;
+	if (left.byteLength !== right.byteLength) return false;
+	return (0, node_crypto.timingSafeEqual)(left, right);
+}
+//#endregion
+//#region ../../packages/shared/src/Struct.ts
+function deepMerge(current, patch) {
+	if (!effect_Predicate.isObject(current) || !effect_Predicate.isObject(patch)) return patch;
+	const next = { ...current };
+	for (const [key, value] of Object.entries(patch)) {
+		if (value === void 0) continue;
+		const existing = next[key];
+		next[key] = effect_Predicate.isObject(existing) && effect_Predicate.isObject(value) ? deepMerge(existing, value) : value;
+	}
+	return next;
+}
+//#endregion
+//#region ../../packages/shared/src/model.ts
+const DEFAULT_PROVIDER_DRIVER_KIND = require_src.ProviderDriverKind.make("codex");
+/**
+* Resolve the human-readable model title used by picker surfaces and durable
+* handoff presentation. Provider catalogs are authoritative when they carry a
+* friendly name; the routing slug remains the deterministic final fallback.
+*/
+function getModelDisplayName(model, options) {
+	const shortName = trimOrNull(model.shortName);
+	const name = trimOrNull(model.name);
+	const slug = trimOrNull(model.slug) ?? model.slug;
+	return options?.preferShortName ? shortName ?? name ?? slug : name ?? shortName ?? slug;
+}
+/** Compose the optional sub-provider prefix exactly as the picker trigger does. */
+function getModelDisplayLabel(model, options) {
+	const title = getModelDisplayName(model, options);
+	const subProvider = trimOrNull(model.subProvider);
+	return subProvider ? `${subProvider} · ${title}` : title;
+}
+function createModelCapabilities(input) {
+	return { optionDescriptors: input.optionDescriptors.map(cloneDescriptor) };
+}
+function getRawSelectionValueById(selections, id) {
+	return (selections?.find((candidate) => candidate.id === id))?.value;
+}
+function getProviderOptionSelectionValue(selections, id) {
+	return getRawSelectionValueById(selections, id);
+}
+function getProviderOptionStringSelectionValue(selections, id) {
+	const value = getProviderOptionSelectionValue(selections, id);
+	return typeof value === "string" ? value : void 0;
+}
+function getProviderOptionBooleanSelectionValue(selections, id) {
+	const value = getProviderOptionSelectionValue(selections, id);
+	return typeof value === "boolean" ? value : void 0;
+}
+function getModelSelectionStringOptionValue(modelSelection, id) {
+	return getProviderOptionStringSelectionValue(modelSelection?.options, id);
+}
+function getModelSelectionBooleanOptionValue(modelSelection, id) {
+	return getProviderOptionBooleanSelectionValue(modelSelection?.options, id);
+}
+function resolveDescriptorChoiceValue(descriptor, raw) {
+	const trimmed = trimOrNull(raw);
+	if (!trimmed) return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
+	if (descriptor.options.length === 0) return trimmed;
+	if (descriptor.promptInjectedValues?.includes(trimmed) && descriptor.options.some((option) => option.id === trimmed)) return descriptor.options.find((option) => option.isDefault)?.id;
+	if (descriptor.options.some((option) => option.id === trimmed)) return trimmed;
+	return descriptor.currentValue ?? descriptor.options.find((option) => option.isDefault)?.id;
+}
+function cloneDescriptor(descriptor) {
+	return descriptor.type === "select" ? {
+		...descriptor,
+		options: [...descriptor.options],
+		...descriptor.promptInjectedValues ? { promptInjectedValues: [...descriptor.promptInjectedValues] } : {}
+	} : { ...descriptor };
+}
+function cloneSelection(selection) {
+	return { ...selection };
+}
+function withDescriptorCurrentValue(descriptor, rawCurrentValue) {
+	if (descriptor.type === "boolean") {
+		if (typeof rawCurrentValue === "boolean") return {
+			...descriptor,
+			currentValue: rawCurrentValue
+		};
+		return descriptor;
+	}
+	const currentValue = typeof rawCurrentValue === "string" ? resolveDescriptorChoiceValue(descriptor, rawCurrentValue) : resolveDescriptorChoiceValue(descriptor, descriptor.currentValue);
+	if (!currentValue) {
+		const { currentValue: _unusedCurrentValue, ...rest } = descriptor;
+		return rest;
+	}
+	return {
+		...descriptor,
+		currentValue
 	};
-	decode.entries = function() {
-		if (decode._called) throw new Error(`${decodeErrPrefix} tag decode() may only be called once`);
-		decode._called = true;
-		const token = tokeniser.next();
-		if (!Type.equals(token.type, Type.map)) throw new Error(`${decodeErrPrefix} entries() requires map content, got ${token.type.name}`);
-		const entries = [];
-		for (const entry of tokenToMapEntries(token, tokeniser, options)) entries.push(entry);
-		return entries;
+}
+function getProviderOptionDescriptors(input) {
+	const { caps, selections } = input;
+	return (caps.optionDescriptors ?? []).map(cloneDescriptor).map((descriptor) => withDescriptorCurrentValue(descriptor, getRawSelectionValueById(selections, descriptor.id) ?? descriptor.currentValue));
+}
+function getProviderOptionCurrentValue(descriptor) {
+	if (!descriptor) return;
+	if (descriptor.type === "boolean") return descriptor.currentValue;
+	if (descriptor.currentValue) return descriptor.currentValue;
+	return descriptor.options.find((option) => option.isDefault)?.id;
+}
+function normalizeModelSlug(model, provider = DEFAULT_PROVIDER_DRIVER_KIND) {
+	if (typeof model !== "string") return null;
+	const trimmed = model.trim();
+	if (!trimmed) return null;
+	const aliases = require_src.MODEL_SLUG_ALIASES_BY_PROVIDER[provider] ?? {};
+	const aliased = Object.prototype.hasOwnProperty.call(aliases, trimmed) ? aliases[trimmed] : void 0;
+	return typeof aliased === "string" ? aliased : trimmed;
+}
+/** Trim a string, returning null for empty/missing values. */
+function trimOrNull(value) {
+	if (typeof value !== "string") return null;
+	return value.trim() || null;
+}
+function cloneSelections(selections) {
+	return selections.map(cloneSelection);
+}
+function createModelSelection(instanceId, model, options) {
+	const selections = options ? cloneSelections(options) : [];
+	const base = {
+		instanceId,
+		model
 	};
-	decode._called = false;
-	return decode;
+	return selections.length > 0 ? {
+		...base,
+		options: selections
+	} : base;
+}
+function canonicalOptionKeys(options) {
+	return (options ?? []).map((option) => JSON.stringify([option.id, option.value])).toSorted((left, right) => left < right ? -1 : left > right ? 1 : 0);
 }
 /**
-* @param {DecodeTokenizer} tokeniser
-* @param {DecodeOptions} options
-* @returns {any|typeof BREAK|typeof DONE}
+* Semantic equality of two model selections: same instance and model, and the
+* same options regardless of their order (absent options equal an empty list).
+* Key order never matters, so a selection round-tripped through JSON and schema
+* decode equals the hydrated one.
 */
-function tokensToObject(tokeniser, options) {
-	if (tokeniser.done()) return DONE;
-	const token = tokeniser.next();
-	if (Type.equals(token.type, Type.break)) return BREAK;
-	if (token.type.terminal) return token.value;
-	if (Type.equals(token.type, Type.array)) return tokenToArray(token, tokeniser, options);
-	if (Type.equals(token.type, Type.map)) return tokenToMap(token, tokeniser, options);
-	if (Type.equals(token.type, Type.tag)) {
-		if (options.tags && typeof options.tags[token.value] === "function") {
-			const decodeControl = createTagDecodeControl(tokeniser, options);
-			const result = options.tags[token.value](decodeControl);
-			if (!decodeControl._called) throw new Error(`${decodeErrPrefix} tag decoder must call decode() or entries()`);
-			return result;
-		}
-		throw new Error(`${decodeErrPrefix} tag not supported (${token.value})`);
-	}
-	throw new Error("unsupported");
+function sameModelSelection(left, right) {
+	if (left.instanceId !== right.instanceId || left.model !== right.model) return false;
+	const leftOptions = canonicalOptionKeys(left.options);
+	const rightOptions = canonicalOptionKeys(right.options);
+	return leftOptions.length === rightOptions.length && leftOptions.every((key, index) => rightOptions[index] === key);
 }
 /**
-* @param {Uint8Array} data
-* @param {DecodeOptions} [options]
-* @returns {[any, Uint8Array]}
+* Context handoff is a provider-instance boundary. Model and option changes
+* within one configured instance remain on that provider's normal turn path.
 */
-function decodeFirst(data, options) {
-	if (!(data instanceof Uint8Array)) throw new Error(`${decodeErrPrefix} data to decode must be a Uint8Array`);
-	options = Object.assign({}, defaultDecodeOptions, options);
-	const u8aData = asU8A(data);
-	const tokeniser = options.tokenizer || new Tokeniser(u8aData, options);
-	const decoded = tokensToObject(tokeniser, options);
-	if (decoded === DONE) throw new Error(`${decodeErrPrefix} did not find any content to decode`);
-	if (decoded === BREAK) throw new Error(`${decodeErrPrefix} got unexpected break`);
-	return [decoded, data.subarray(tokeniser.pos())];
+function modelSelectionRequiresContextHandoff(input) {
+	return input.canonicalSelection.instanceId !== input.targetSelection.instanceId;
 }
 /**
-* @param {Uint8Array} data
-* @param {DecodeOptions} [options]
-* @returns {any}
+* Returns the effort value if it is a prompt-injected value according to
+* any select descriptor in the given capabilities, or null otherwise.
+*
+* Unlike a single `find`, this checks every descriptor so that the
+* correct descriptor's `promptInjectedValues` list is consulted even when
+* multiple select descriptors exist.
 */
-function decode(data, options) {
-	const [decoded, remainder] = decodeFirst(data, options);
-	if (remainder.length > 0) throw new Error(`${decodeErrPrefix} too many terminals, data makes no sense`);
-	return decoded;
-}
-Object.defineProperty(class Tagged {
-	/**
-	* @param {number} tag - CBOR tag number, a non-negative integer
-	* @param {any} value - The value to be tagged; encoded recursively
-	*/
-	constructor(tag, value) {
-		if (typeof tag !== "number" || !Number.isInteger(tag) || tag < 0) throw new TypeError("Tagged: tag must be a non-negative integer");
-		this.tag = tag;
-		this.value = value;
-	}
-	/**
-	* Build a tag decoder for use in `decode()`'s `tags` option that returns the
-	* decoded content wrapped in a `Tagged` instance, preserving the tag number
-	* for the caller to inspect.
-	*
-	* @param {number} tag - The CBOR tag number this decoder will be registered for
-	* @returns {TaggedTagDecoder}
-	*
-	* @example
-	* import { decode, Tagged } from 'cborg'
-	* const value = decode(bytes, { tags: { 16: Tagged.decoder(16) } })
-	* // value instanceof Tagged; value.tag === 16
-	*/
-	static decoder(tag) {
-		return (decode) => new Tagged(tag, decode());
-	}
-	/**
-	* Build a `tags` option for `decode()` that wraps each listed tag number in
-	* a `Tagged` instance, preserving those tags through decode without
-	* registering a dedicated decoder per tag.
-	*
-	* @param {...number} tagNumbers - One or more CBOR tag numbers to preserve
-	* @returns {{[tagNumber: number]: TaggedTagDecoder}}
-	*
-	* @example
-	* import { decode, Tagged } from 'cborg'
-	* const value = decode(bytes, { tags: Tagged.preserve(16, 96) })
-	*/
-	static preserve(...tagNumbers) {
-		/** @type {{[tagNumber: number]: TaggedTagDecoder}} */
-		const tags = {};
-		for (const tag of tagNumbers) tags[tag] = Tagged.decoder(tag);
-		return tags;
-	}
-}.prototype, Symbol.toStringTag, { value: "Tagged" });
-//#endregion
-//#region ../../packages/shared/src/nodeIdentity.ts
-const NODE_AUTH_TRANSCRIPT_DOMAIN = "ryco.node-auth.proof.v1";
-const NODE_KEY_FINGERPRINT_DOMAIN = "ryco.node-key.v1";
-const NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN = "ryco.node-key-rotation.proof.v1";
-const NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN = "ryco.native-node-claim.proof.v1";
-var NodeIdentityValidationError = class extends Error {
-	code = "invalid_node_identity_input";
-	constructor() {
-		super("Node identity input is invalid.");
-		this.name = "NodeIdentityValidationError";
-	}
-};
-const ID_SUFFIX = "[A-Za-z0-9_-]{22}";
-const NODE_ID = new RegExp(`^node_${ID_SUFFIX}$`);
-const NODE_KEY_ID = new RegExp(`^nkey_${ID_SUFFIX}$`);
-const ROTATION_REQUEST_ID = new RegExp(`^nrot_${ID_SUFFIX}$`);
-const PUBLIC_ID_SUFFIX = "[A-Za-z0-9_-]{22,43}";
-const ACCOUNT_ID = new RegExp(`^acct_${PUBLIC_ID_SUFFIX}$`);
-const SPACE_ID = new RegExp(`^space_${PUBLIC_ID_SUFFIX}$`);
-const SESSION_ID = new RegExp(`^sess_${PUBLIC_ID_SUFFIX}$`);
-const NATIVE_NODE_CLAIM_ID = new RegExp(`^nclaim_${PUBLIC_ID_SUFFIX}$`);
-const DESKTOP_INSTALLATION_ID = new RegExp(`^install_${PUBLIC_ID_SUFFIX}$`);
-const ENVIRONMENT_ID = /^env_[A-Za-z0-9_-]{22}$/;
-const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
-	"localhost",
-	"127.0.0.1",
-	"[::1]"
-]);
-function invalid() {
-	throw new NodeIdentityValidationError();
-}
-function assertUnsignedSafeInteger(value) {
-	if (!Number.isSafeInteger(value) || value < 0) invalid();
-}
-function assertProtocolVersion(value) {
-	if (!Number.isSafeInteger(value) || value < 0 || value > 65535) invalid();
-}
-function assertIdentifier(value, pattern) {
-	if (!pattern.test(value)) invalid();
-}
-function copyBytes(value, expectedLengths) {
-	if (!(value instanceof Uint8Array) || !expectedLengths.includes(value.byteLength)) invalid();
-	return Uint8Array.from(value);
+function resolvePromptInjectedEffort(caps, rawEffort) {
+	const trimmed = trimOrNull(rawEffort);
+	if (!trimmed) return null;
+	const descriptors = getProviderOptionDescriptors({ caps });
+	for (const descriptor of descriptors) if (descriptor.type === "select" && descriptor.promptInjectedValues?.includes(trimmed)) return trimmed;
+	return null;
 }
-function canonicalizeHubOrigin(value) {
-	if (typeof value !== "string" || value.length === 0 || value.length > 512) invalid();
-	let url;
-	try {
-		url = new URL(value);
-	} catch {
-		return invalid();
-	}
-	const isLoopbackHttp = url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname);
-	if (url.protocol !== "https:" && !isLoopbackHttp || url.username !== "" || url.password !== "" || url.pathname !== "/" || url.search !== "" || url.hash !== "" || value !== url.origin) invalid();
-	return url.origin;
+function applyClaudePromptEffortPrefix(text, effort) {
+	const trimmed = text.trim();
+	if (!trimmed) return trimmed;
+	if (effort !== "ultrathink") return trimmed;
+	if (trimmed.startsWith("Ultrathink:")) return trimmed;
+	return `Ultrathink:\n${trimmed}`;
 }
-function normalizeHubNodeName(value) {
-	if (typeof value !== "string") invalid();
-	const normalized = value.trim();
-	if (normalized.length === 0 || normalized.length > 100) invalid();
-	return normalized;
+//#endregion
+//#region ../../packages/shared/src/serverSettings.ts
+const ServerSettingsJson$1 = require_schemaJson.fromLenientJson(require_src.ServerSettings);
+function normalizePersistedServerSettingString(value) {
+	const trimmed = value?.trim();
+	return trimmed && trimmed.length > 0 ? trimmed : void 0;
 }
-function validateNodePublicKey(descriptor) {
-	if (descriptor.algorithm === "ed25519") return {
-		algorithm: descriptor.algorithm,
-		publicKey: copyBytes(descriptor.publicKey, [32])
+function extractPersistedServerObservabilitySettings(input) {
+	return {
+		otlpTracesUrl: normalizePersistedServerSettingString(input.observability?.otlpTracesUrl),
+		otlpMetricsUrl: normalizePersistedServerSettingString(input.observability?.otlpMetricsUrl)
 	};
-	if (descriptor.algorithm === "p256") {
-		const publicKey = copyBytes(descriptor.publicKey, [33, 65]);
-		const prefix = publicKey[0];
-		if (publicKey.byteLength === 33 && prefix !== 2 && prefix !== 3 || publicKey.byteLength === 65 && prefix !== 4) invalid();
+}
+function parsePersistedServerObservabilitySettings(raw) {
+	try {
+		return extractPersistedServerObservabilitySettings(effect.Schema.decodeUnknownSync(ServerSettingsJson$1)(raw));
+	} catch {
 		return {
-			algorithm: descriptor.algorithm,
-			publicKey
+			otlpTracesUrl: void 0,
+			otlpMetricsUrl: void 0
 		};
 	}
-	return invalid();
-}
-function fingerprintNodePublicKey(descriptor) {
-	const key = validateNodePublicKey(descriptor);
-	const canonical = encode([
-		NODE_KEY_FINGERPRINT_DOMAIN,
-		key.algorithm,
-		key.publicKey
-	], rfc8949EncodeOptions);
-	return Uint8Array.from((0, node_crypto.createHash)("sha256").update(canonical).digest());
-}
-function formatNodePublicKeyFingerprint(fingerprint) {
-	const bytes = copyBytes(fingerprint, [32]);
-	return `SHA256:${Buffer.from(bytes).toString("base64url")}`;
-}
-function encodeNodeAuthenticationTranscript(input) {
-	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
-	assertProtocolVersion(input.protocolMajor);
-	assertProtocolVersion(input.protocolMinor);
-	assertIdentifier(input.nodeId, NODE_ID);
-	assertIdentifier(input.activeKeyId, NODE_KEY_ID);
-	assertUnsignedSafeInteger(input.challengeExpiresAt);
-	const challenge = copyBytes(input.challenge, [32]);
-	return Uint8Array.from(encode([
-		NODE_AUTH_TRANSCRIPT_DOMAIN,
-		hubOrigin,
-		input.protocolMajor,
-		input.protocolMinor,
-		input.nodeId,
-		input.activeKeyId,
-		input.challengeExpiresAt,
-		challenge
-	], rfc8949EncodeOptions));
 }
-function encodeNodeKeyRotationTranscript(input) {
-	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
-	assertProtocolVersion(input.protocolMajor);
-	assertProtocolVersion(input.protocolMinor);
-	assertIdentifier(input.rotationRequestId, ROTATION_REQUEST_ID);
-	assertIdentifier(input.nodeId, NODE_ID);
-	assertIdentifier(input.oldActiveKeyId, NODE_KEY_ID);
-	assertIdentifier(input.newKeyId, NODE_KEY_ID);
-	assertUnsignedSafeInteger(input.challengeExpiresAt);
-	const newKey = validateNodePublicKey(input.newKey);
-	const fingerprint = fingerprintNodePublicKey(newKey);
-	const challenge = copyBytes(input.challenge, [32]);
-	return Uint8Array.from(encode([
-		NODE_KEY_ROTATION_TRANSCRIPT_DOMAIN,
-		hubOrigin,
-		input.protocolMajor,
-		input.protocolMinor,
-		input.rotationRequestId,
-		input.nodeId,
-		input.oldActiveKeyId,
-		input.newKeyId,
-		newKey.algorithm,
-		newKey.publicKey,
-		fingerprint,
-		input.challengeExpiresAt,
-		challenge
-	], rfc8949EncodeOptions));
+function shouldReplaceTextGenerationModelSelection(patch) {
+	return Boolean(patch && (patch.instanceId !== void 0 || patch.model !== void 0));
 }
-function encodeNativeNodeClaimTranscript(input) {
-	const hubOrigin = canonicalizeHubOrigin(input.hubOrigin);
-	assertProtocolVersion(input.protocolVersion);
-	assertProtocolVersion(input.transcriptVersion);
-	assertIdentifier(input.claimId, NATIVE_NODE_CLAIM_ID);
-	assertIdentifier(input.accountId, ACCOUNT_ID);
-	assertIdentifier(input.spaceId, SPACE_ID);
-	assertIdentifier(input.sessionId, SESSION_ID);
-	const dpopKeyThumbprint = copyBytes(input.dpopKeyThumbprint, [32]);
-	assertIdentifier(input.installationId, DESKTOP_INSTALLATION_ID);
-	assertIdentifier(input.environmentId, ENVIRONMENT_ID);
-	const nodeKey = validateNodePublicKey(input.nodeKey);
-	const nodeFingerprint = fingerprintNodePublicKey(nodeKey);
-	assertUnsignedSafeInteger(input.claimExpiresAt);
-	const challenge = copyBytes(input.challenge, [32]);
-	return Uint8Array.from(encode([
-		NATIVE_NODE_CLAIM_TRANSCRIPT_DOMAIN,
-		hubOrigin,
-		input.protocolVersion,
-		input.transcriptVersion,
-		input.claimId,
-		input.accountId,
-		input.spaceId,
-		input.sessionId,
-		dpopKeyThumbprint,
-		input.installationId,
-		input.environmentId,
-		nodeKey.algorithm,
-		nodeKey.publicKey,
-		nodeFingerprint,
-		input.claimExpiresAt,
-		challenge
-	], rfc8949EncodeOptions));
+function mergeModelSelectionOptionsById(input) {
+	if (input.patch === void 0) return input.current ? [...input.current] : void 0;
+	if (input.patch.length === 0) return;
+	const merged = new Map((input.current ?? []).map((selection) => [selection.id, selection.value]));
+	for (const selection of input.patch) merged.set(selection.id, selection.value);
+	return [...merged.entries()].map(([id, value]) => ({
+		id,
+		value
+	}));
 }
-function equalNodeIdentityBytes(left, right) {
-	if (!(left instanceof Uint8Array) || !(right instanceof Uint8Array)) return false;
-	if (left.byteLength !== right.byteLength) return false;
-	return (0, node_crypto.timingSafeEqual)(left, right);
+/**
+* Applies a server settings patch while treating textGenerationModelSelection as
+* replace-on-provider/model updates. This prevents stale nested options from
+* surviving a reset patch that intentionally omits options.
+*/
+function applyServerSettingsPatch(current, patch) {
+	const selectionPatch = patch.textGenerationModelSelection;
+	for (const [field, value] of Object.entries(patch.expectedNodePreferences ?? {})) if (!effect.Equal.equals(current[field] ?? null, value)) throw new Error("Node preferences changed elsewhere. Reload before saving.");
+	for (const [projectId, expected] of Object.entries(patch.expectedProjectPreferences ?? {})) {
+		const currentPreferences = current.projectPreferences[projectId] ?? {};
+		for (const [field, value] of Object.entries(expected)) {
+			const actual = field === "initialModelSelection" && !Object.hasOwn(currentPreferences, field) ? "absent" : currentPreferences[field] ?? null;
+			if (!effect.Equal.equals(actual, value)) throw new Error("Project preferences changed elsewhere. Reload before saving.");
+		}
+	}
+	const { expectedProjectPreferences: _expected, expectedNodePreferences: _expectedNode, projectPreferences: _projects, ...persistedPatch } = patch;
+	let next = deepMerge(current, persistedPatch);
+	if (patch.initialModelSelection !== void 0) next = {
+		...next,
+		initialModelSelection: patch.initialModelSelection
+	};
+	if (patch.projectPreferences !== void 0) {
+		const projects = new Map(Object.entries(current.projectPreferences));
+		for (const [projectId, preferencesPatch] of Object.entries(patch.projectPreferences)) {
+			if (preferencesPatch === null) {
+				projects.delete(projectId);
+				continue;
+			}
+			const preferences = { ...projects.get(projectId) };
+			for (const [field, value] of Object.entries(preferencesPatch)) if (value === null && field !== "initialModelSelection") delete preferences[field];
+			else Object.assign(preferences, { [field]: value });
+			if (Object.keys(preferences).length) projects.set(projectId, preferences);
+			else projects.delete(projectId);
+		}
+		next = {
+			...next,
+			projectPreferences: Object.fromEntries(projects)
+		};
+	}
+	if (patch.projectWorktreeSubmodules !== void 0) {
+		const modes = new Map(Object.entries(current.projectWorktreeSubmodules));
+		for (const [projectId, mode] of Object.entries(patch.projectWorktreeSubmodules)) if (mode === null) modes.delete(projectId);
+		else modes.set(projectId, mode);
+		next = {
+			...next,
+			projectWorktreeSubmodules: Object.fromEntries(modes)
+		};
+	}
+	if (patch.projectWorktreeRoots !== void 0) {
+		const roots = new Map(Object.entries(current.projectWorktreeRoots));
+		for (const [projectId, root] of Object.entries(patch.projectWorktreeRoots)) if (root === null || root === "") roots.delete(projectId);
+		else roots.set(projectId, root);
+		next = {
+			...next,
+			projectWorktreeRoots: Object.fromEntries(roots)
+		};
+	}
+	if (patch.projectStorageRetention !== void 0) {
+		const policies = new Map(Object.entries(current.projectStorageRetention));
+		for (const [projectId, policy] of Object.entries(patch.projectStorageRetention)) if (policy === null) policies.delete(projectId);
+		else policies.set(projectId, policy);
+		next = {
+			...next,
+			projectStorageRetention: Object.fromEntries(policies)
+		};
+	}
+	if (patch.projectLifecycleSuggestions !== void 0) {
+		const policies = new Map(Object.entries(current.projectLifecycleSuggestions));
+		for (const [projectId, policy] of Object.entries(patch.projectLifecycleSuggestions)) if (policy === null) policies.delete(projectId);
+		else policies.set(projectId, policy);
+		next = {
+			...next,
+			projectLifecycleSuggestions: Object.fromEntries(policies)
+		};
+	}
+	const nextWithReplacements = patch.providerInstances !== void 0 ? {
+		...next,
+		providerInstances: patch.providerInstances
+	} : next;
+	if (!selectionPatch) return nextWithReplacements;
+	const instanceId = selectionPatch.instanceId ?? current.textGenerationModelSelection.instanceId;
+	const model = selectionPatch.model ?? current.textGenerationModelSelection.model;
+	const options = shouldReplaceTextGenerationModelSelection(selectionPatch) ? selectionPatch.options : mergeModelSelectionOptionsById({
+		current: current.textGenerationModelSelection.options,
+		patch: selectionPatch.options
+	});
+	return {
+		...nextWithReplacements,
+		textGenerationModelSelection: createModelSelection(instanceId, model, options)
+	};
 }
 //#endregion
 //#region src/config.ts
@@ -2895,6 +2919,7 @@ function resolveHubConnectorConfig(raw) {
 	};
 }
 const DEFAULT_NODE_E2EE_POLICY_CONFIG = {
+	mode: void 0,
 	requireE2EE: void 0,
 	requireApprovedClientE2EE: void 0,
 	configurationIssue: void 0
@@ -2921,15 +2946,21 @@ const parseTriStateBoolean = (value) => {
 function resolveNodeE2eePolicyConfig(raw) {
 	const requireE2EE = parseTriStateBoolean(raw.requireE2EE);
 	const requireApprovedClientE2EE = parseTriStateBoolean(raw.requireApprovedClientE2EE);
+	const mode = raw.mode === void 0 ? void 0 : effect.Schema.is(require_src.NodeE2eeAdmissionPolicy)(raw.mode) ? raw.mode : null;
 	return {
+		mode: mode ?? void 0,
 		requireE2EE: typeof requireE2EE === "boolean" ? requireE2EE : void 0,
 		requireApprovedClientE2EE: typeof requireApprovedClientE2EE === "boolean" ? requireApprovedClientE2EE : void 0,
-		configurationIssue: requireE2EE === void 0 || requireApprovedClientE2EE === void 0 ? "configuration_invalid" : void 0
+		configurationIssue: requireE2EE === void 0 || requireApprovedClientE2EE === void 0 || mode === null ? "configuration_invalid" : void 0
 	};
 }
 function resolveManagedWorktreesRoot(config) {
 	return config.workspaceAccessRoot === void 0 ? config.worktreesDir : node_path.default.join(config.workspaceAccessRoot, ".ryco", "worktrees");
 }
+/** The chats root used when the `chatsRoot` setting is empty. */
+function resolveManagedChatsRoot(config) {
+	return config.workspaceAccessRoot === void 0 ? config.chatsDir : node_path.default.join(config.workspaceAccessRoot, ".ryco", "chats");
+}
 const deriveServerPaths = effect.Effect.fn(function* (baseDir, devUrl) {
 	const { join } = yield* effect.Path.Path;
 	const stateDir = join(baseDir, devUrl !== void 0 ? "dev" : "userdata");
@@ -2945,6 +2976,7 @@ const deriveServerPaths = effect.Effect.fn(function* (baseDir, devUrl) {
 		settingsPath: join(stateDir, "settings.json"),
 		providerStatusCacheDir,
 		worktreesDir: join(baseDir, "worktrees"),
+		chatsDir: join(baseDir, "chats"),
 		attachmentsDir,
 		logsDir,
 		serverLogPath: join(logsDir, "server.log"),
@@ -3452,6 +3484,11 @@ async function removeVerifiedWorktree(repository, candidate, cleanup) {
 //#region src/storage/lifecycle.ts
 const storageLifecycleLock = effect.Semaphore.makeUnsafe(1);
 const creations = /* @__PURE__ */ new Map();
+let activityVersion = 0;
+const noteStorageActivity = () => {
+	activityVersion++;
+};
+const storageActivityVersion = () => activityVersion;
 const overlaps = (a, b, platform = process.platform) => {
 	if (platform === "darwin" || platform === "win32") {
 		a = a.toLowerCase();
@@ -3460,6 +3497,12 @@ const overlaps = (a, b, platform = process.platform) => {
 	const boundary = (root) => root.endsWith(node_path.default.sep) ? root : root + node_path.default.sep;
 	return a === b || a.startsWith(boundary(b)) || b.startsWith(boundary(a));
 };
+/** `candidate` is `root` or below it. */
+const contains = (root, candidate, platform) => {
+	const a = platform === "darwin" || platform === "win32" ? root.toLowerCase() : root;
+	const b = platform === "darwin" || platform === "win32" ? candidate.toLowerCase() : candidate;
+	return a === b || b.startsWith(a.endsWith(node_path.default.sep) ? a : a + node_path.default.sep);
+};
 const removingPaths = (row) => {
 	let identity;
 	try {
@@ -3490,6 +3533,7 @@ async function canonicalStoragePath(candidate) {
 function acquireWorktreeCreationLease(sql, candidate) {
 	return storageLifecycleLock.withPermit(effect.Effect.gen(function* () {
 		const canonical = yield* effect.Effect.tryPromise(() => canonicalStoragePath(candidate));
+		if (yield* isWorktreeRelocationBlocked(sql, canonical)) return yield* new require_src.StorageError({ detail: "Checkout relocation is pending or this is a retired checkout path. Reload the workspace." });
 		const pending = yield* sql`SELECT path, identity_json FROM storage_owned_entries WHERE state = 'removing' LIMIT 257`;
 		if (pending.length > 256) return yield* new require_src.StorageError({ detail: "Too many interrupted cleanups to establish safe creation admission. Inspect pending cleanup records." });
 		if (pending.some((row) => removingPaths(row).some((root) => overlaps(root, canonical)))) return yield* new require_src.StorageError({ detail: "Checkout cleanup is pending. Creation cannot replace an in-flight removal." });
@@ -3498,6 +3542,7 @@ function acquireWorktreeCreationLease(sql, candidate) {
 			const remaining = (creations.get(canonical) ?? 1) - 1;
 			if (remaining > 0) creations.set(canonical, remaining);
 			else creations.delete(canonical);
+			noteStorageActivity();
 		});
 	}));
 }
@@ -3505,12 +3550,14 @@ function acquireWorktreeCreationLease(sql, candidate) {
 function acquireStoragePathUseLease(sql, candidate) {
 	return storageLifecycleLock.withPermit(effect.Effect.gen(function* () {
 		const canonical = yield* effect.Effect.tryPromise(() => canonicalStoragePath(candidate));
-		if (yield* isStoragePathBlocked(sql, canonical)) return yield* new require_src.StorageError({ detail: "Checkout cleanup is pending or complete. Restore/recreate it before provider recovery." });
+		const blocker = yield* storagePathBlocker(sql, canonical);
+		if (blocker !== null) return yield* new require_src.StorageError({ detail: blocker === "project-relocation" ? require_src.PROJECT_RELOCATION_PENDING_MESSAGE : "Checkout cleanup is pending or complete. Restore/recreate it before provider recovery." });
 		creations.set(canonical, (creations.get(canonical) ?? 0) + 1);
 		return effect.Effect.sync(() => {
 			const remaining = (creations.get(canonical) ?? 1) - 1;
 			if (remaining > 0) creations.set(canonical, remaining);
 			else creations.delete(canonical);
+			noteStorageActivity();
 		});
 	}));
 }
@@ -3538,8 +3585,22 @@ function recordCreatedWorktree(sql, repository, candidate) {
       WHERE storage_owned_entries.state != 'removing' RETURNING id`).length !== 1) return yield* new require_src.StorageError({ detail: "Ownership capture refused to replace a pending cleanup. The creation outcome remains protected." });
 	});
 }
-/** Persistent tombstones prevent restart/resume from granting authority to a removed checkout. */
-function isStoragePathBlocked(sql, candidate, platform = process.platform) {
+/**
+* Storage admission for a path: refused while a chat's folder moves or checkout lifecycle work
+* fences it. Persistent tombstones prevent restart/resume from granting authority to a removed
+* checkout.
+*/
+function isStoragePathBlocked(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return storagePathBlocker(sql, candidate, platform, ignoredRelocationId).pipe(effect.Effect.map((blocker) => blocker !== null));
+}
+/** {@link isStoragePathBlocked}, with the reason, so admission can tell a retryable move apart. */
+function storagePathBlocker(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return effect.Effect.gen(function* () {
+		if (yield* isProjectRelocationBlocked(sql, candidate, platform)) return "project-relocation";
+		return (yield* isCheckoutPathBlocked(sql, candidate, platform, ignoredRelocationId)) ? "checkout" : null;
+	});
+}
+function isCheckoutPathBlocked(sql, candidate, platform, ignoredRelocationId) {
 	const ancestors = [];
 	let current = node_path.default.resolve(candidate);
 	for (;;) {
@@ -3550,11 +3611,42 @@ function isStoragePathBlocked(sql, candidate, platform = process.platform) {
 	}
 	const matching = platform === "darwin" || platform === "win32" ? sql`path COLLATE NOCASE IN ${sql.in(ancestors)}` : sql.in("path", ancestors);
 	return effect.Effect.gen(function* () {
+		if (yield* isWorktreeRelocationBlocked(sql, candidate, platform, ignoredRelocationId)) return true;
 		if ((yield* sql`SELECT path FROM storage_owned_entries WHERE state IN ('removing', 'removed') AND ${matching} LIMIT 1`).length) return true;
 		const pending = yield* sql`SELECT path, identity_json FROM storage_owned_entries WHERE state = 'removing' LIMIT 257`;
 		return pending.length > 256 || pending.some((row) => removingPaths(row).some((root) => overlaps(root, node_path.default.resolve(candidate), platform)));
 	});
 }
+/** Active moves fence both paths; completed moves permanently fence the old path. */
+function isWorktreeRelocationBlocked(sql, candidate, platform = process.platform, ignoredRelocationId) {
+	return effect.Effect.gen(function* () {
+		if (!(yield* sql`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'managed_worktree_relocations'`).length) return false;
+		const rows = yield* sql`
+      SELECT source_path, destination_path, state FROM managed_worktree_relocations
+      WHERE state IN ('moving', 'moved', 'attention', 'complete')
+        AND worktree_id != ${ignoredRelocationId ?? ""}`;
+		const resolved = node_path.default.resolve(candidate);
+		return rows.some((row) => row.state === "complete" ? contains(row.source_path, resolved, platform) : overlaps(row.source_path, resolved, platform) || overlaps(row.destination_path, resolved, platform));
+	});
+}
+/**
+* An unsettled chat promotion (`project_relocations` row `pending` or `moved`, see
+* `project/chatPromotion.ts`) fences everything at or below both of its paths, so no turn, provider
+* session or terminal starts in a folder that is moving. Promotion writes the row before it stops
+* sessions and closes terminals. Unlike a checkout move, ancestors stay usable: a project that
+* merely contains the chats folder is unrelated, and a write into a moving copy fails its
+* verification. Settled moves lift the fence; the project then points at its new root.
+*/
+function isProjectRelocationBlocked(sql, candidate, platform = process.platform) {
+	return effect.Effect.gen(function* () {
+		if (!(yield* sql`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'project_relocations'`).length) return false;
+		const rows = yield* sql`
+      SELECT source_path, destination_path FROM project_relocations
+      WHERE state IN ('pending', 'moved')`;
+		const resolved = node_path.default.resolve(candidate);
+		return rows.some((row) => contains(row.source_path, resolved, platform) || contains(row.destination_path, resolved, platform));
+	});
+}
 //#endregion
 //#region src/atomicWrite.ts
 const writeFileStringAtomically = (input) => effect.Effect.scoped(effect.Effect.gen(function* () {
@@ -3665,7 +3757,11 @@ function expandHomePath(value) {
 }
 //#endregion
 //#region src/project/worktreeRoot.ts
-var WorktreeRootError = class extends effect.Schema.TaggedError()("WorktreeRootError", { detail: effect.Schema.String }) {
+var WorktreeRootError = class extends effect.Schema.TaggedError()("WorktreeRootError", {
+	detail: effect.Schema.String,
+	/** `restricted`: the workspace access policy rejected it; `unusable`: the path itself is. */
+	reason: effect.Schema.optional(effect.Schema.Literals(["unusable", "restricted"]))
+}) {
 	get message() {
 		return this.detail;
 	}
@@ -3695,6 +3791,8 @@ async function resolveWorktreePath(candidate) {
 		ancestor = parent;
 	}
 }
+/** The canonical nearest existing ancestor; probes that need a real cwd run there. */
+const resolveExistingAncestor = async (candidate) => (await resolveWorktreePath(candidate)).existingAncestor;
 /** One identity for existing and missing worktree paths; no writable-access requirement.
 * Shared by destination locks, journal lookup and Git-registration comparisons.
 */
@@ -3705,23 +3803,37 @@ async function canonicalizeWorktreeDirectory(candidate) {
 	await (0, node_fs_promises.access)(resolved.existingAncestor, node_fs.constants.W_OK | node_fs.constants.X_OK);
 	return resolved.canonicalPath;
 }
-const validateWorktreeRoot = (value, policy) => effect.Effect.gen(function* () {
+/**
+* Validate a node-local root setting (worktree root, chats folder). `label` names the setting in
+* user-facing errors.
+*/
+const validateWorktreeRoot = (value, policy, label = "Worktree root") => effect.Effect.gen(function* () {
 	const trimmed = value.trim();
 	const expanded = expandHomePath(trimmed);
-	if (!trimmed || /[\x00-\x1f\x7f]/.test(trimmed) || !node_path.default.isAbsolute(expanded) || process.platform === "win32" && !/^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)/.test(expanded)) return yield* new WorktreeRootError({ detail: "Worktree root must be an absolute directory on this node or start with ~/." });
-	const operation = "worktree root";
+	if (!trimmed || /[\x00-\x1f\x7f]/.test(trimmed) || !node_path.default.isAbsolute(expanded) || process.platform === "win32" && !/^(?:[A-Za-z]:[\\/]|\\\\[^\\]+\\[^\\]+)/.test(expanded)) return yield* new WorktreeRootError({
+		detail: `${label} must be an absolute directory on this node or start with ~/.`,
+		reason: "unusable"
+	});
+	const operation = label.toLowerCase();
+	const restricted = (cause) => new WorktreeRootError({
+		detail: cause.message,
+		reason: "restricted"
+	});
 	const authorized = yield* policy.assertPath({
 		path: node_path.default.normalize(expanded),
 		operation
-	}).pipe(effect.Effect.mapError((cause) => new WorktreeRootError({ detail: cause.message })));
+	}).pipe(effect.Effect.mapError(restricted));
 	const canonical = yield* effect.Effect.tryPromise({
 		try: () => canonicalizeWorktreeDirectory(authorized),
-		catch: () => new WorktreeRootError({ detail: "Worktree root must resolve to a writable directory (or have a writable existing parent), without broken symlinks." })
+		catch: () => new WorktreeRootError({
+			detail: `${label} must resolve to a writable directory (or have a writable existing parent), without broken symlinks.`,
+			reason: "unusable"
+		})
 	});
 	return yield* policy.assertPath({
 		path: canonical,
 		operation
-	}).pipe(effect.Effect.mapError((cause) => new WorktreeRootError({ detail: cause.message })));
+	}).pipe(effect.Effect.mapError(restricted));
 });
 /** Storage selection only: this never grants access to the selected directory's contents. */
 const selectConfiguredWorktreeRoot = (input) => (input.projectId && Object.hasOwn(input.settings.projectWorktreeRoots, input.projectId) ? input.settings.projectWorktreeRoots[input.projectId] : null) || input.settings.worktreeRoot || resolveManagedWorktreesRoot(input.config);
@@ -4091,12 +4203,13 @@ const makeServerSettings = effect.Effect.gen(function* () {
 		updateSettings: (patch) => writeSemaphore.withPermits(1)(effect.Effect.gen(function* () {
 			const current = yield* getSettingsFromCache;
 			const normalizedPatch = { ...patch };
-			const validateRoot = (root) => validateWorktreeRoot(root, worktreeAccessPolicy).pipe(effect.Effect.mapError((cause) => new require_src.ServerSettingsError({
+			const validateRoot = (root, label) => validateWorktreeRoot(root, worktreeAccessPolicy, label).pipe(effect.Effect.mapError((cause) => new require_src.ServerSettingsError({
 				settingsPath,
 				detail: cause.message,
 				cause
 			})));
 			if (patch.worktreeRoot) normalizedPatch.worktreeRoot = yield* validateRoot(patch.worktreeRoot);
+			if (patch.chatsRoot) normalizedPatch.chatsRoot = yield* validateRoot(patch.chatsRoot, "Chats folder");
 			if (patch.projectWorktreeRoots !== void 0) {
 				const roots = [];
 				for (const [id, root] of Object.entries(patch.projectWorktreeRoots)) roots.push([id, root ? yield* validateRoot(root) : null]);
@@ -4419,6 +4532,12 @@ const providerTurnMetricAttributes = (input) => {
 	});
 };
 //#endregion
+Object.defineProperty(exports, "DEFAULT_HUB_CONNECTOR_CONFIG", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_HUB_CONNECTOR_CONFIG;
+	}
+});
 Object.defineProperty(exports, "DEFAULT_PORT", {
 	enumerable: true,
 	get: function() {
@@ -4743,6 +4862,12 @@ Object.defineProperty(exports, "isStoragePathBlocked", {
 		return isStoragePathBlocked;
 	}
 });
+Object.defineProperty(exports, "isWorktreeRelocationBlocked", {
+	enumerable: true,
+	get: function() {
+		return isWorktreeRelocationBlocked;
+	}
+});
 Object.defineProperty(exports, "makeWorkspaceAccessPolicy", {
 	enumerable: true,
 	get: function() {
@@ -4791,6 +4916,12 @@ Object.defineProperty(exports, "normalizeModelSlug", {
 		return normalizeModelSlug;
 	}
 });
+Object.defineProperty(exports, "noteStorageActivity", {
+	enumerable: true,
+	get: function() {
+		return noteStorageActivity;
+	}
+});
 Object.defineProperty(exports, "orchestrationCommandAckDuration", {
 	enumerable: true,
 	get: function() {
@@ -4935,12 +5066,24 @@ Object.defineProperty(exports, "resolveConfiguredWorktreeRoot", {
 		return resolveConfiguredWorktreeRoot;
 	}
 });
+Object.defineProperty(exports, "resolveExistingAncestor", {
+	enumerable: true,
+	get: function() {
+		return resolveExistingAncestor;
+	}
+});
 Object.defineProperty(exports, "resolveHubConnectorConfig", {
 	enumerable: true,
 	get: function() {
 		return resolveHubConnectorConfig;
 	}
 });
+Object.defineProperty(exports, "resolveManagedChatsRoot", {
+	enumerable: true,
+	get: function() {
+		return resolveManagedChatsRoot;
+	}
+});
 Object.defineProperty(exports, "resolveManagedWorktreesRoot", {
 	enumerable: true,
 	get: function() {
@@ -5031,6 +5174,12 @@ Object.defineProperty(exports, "runtimeQueueRecoveriesTotal", {
 		return runtimeQueueRecoveriesTotal;
 	}
 });
+Object.defineProperty(exports, "sameModelSelection", {
+	enumerable: true,
+	get: function() {
+		return sameModelSelection;
+	}
+});
 Object.defineProperty(exports, "selectConfiguredWorktreeRoot", {
 	enumerable: true,
 	get: function() {
@@ -5061,12 +5210,24 @@ Object.defineProperty(exports, "startupCommandGateQueueWaitDuration", {
 		return startupCommandGateQueueWaitDuration;
 	}
 });
+Object.defineProperty(exports, "storageActivityVersion", {
+	enumerable: true,
+	get: function() {
+		return storageActivityVersion;
+	}
+});
 Object.defineProperty(exports, "storageLifecycleLock", {
 	enumerable: true,
 	get: function() {
 		return storageLifecycleLock;
 	}
 });
+Object.defineProperty(exports, "storagePathBlocker", {
+	enumerable: true,
+	get: function() {
+		return storagePathBlocker;
+	}
+});
 Object.defineProperty(exports, "terminalRestartsTotal", {
 	enumerable: true,
 	get: function() {